cryptographic-failures
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting and analyzing untrusted user source code, which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: User-supplied Python application code (FastAPI/Flask) for security auditing in SKILL.md.
- Boundary markers: None explicitly mentioned for isolating processed code from agent instructions.
- Capability inventory: Includes local shell command execution (Bandit, grep) and file system operations (reading source, writing scan results).
- Sanitization: No specific sanitization or escaping of the audited code content is described.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing well-known security tools and cryptographic libraries from official registries.
- Recommends installation of 'bandit', a standard static analysis security tool for Python.
- References established libraries such as 'cryptography', 'passlib', 'PyJWT', and 'requests'.
- [COMMAND_EXECUTION]: The skill utilizes standard command-line utilities for security analysis tasks.
- Executes 'bandit' to perform automated security scans on the local repository.
- Uses 'grep' for pattern-based searching of cryptographic weaknesses (e.g., weak hashing or hardcoded secrets) in the local codebase.
Audit Metadata