security-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates as a security auditor, ingesting untrusted project source code and configuration files to generate reports and propose code fixes, which is its primary intended purpose.
- Ingestion points: The agent is instructed to identify and inspect all languages and frameworks within the project scope by reading the repository files (
SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts within the analyzed source code are defined in the skill's core instructions.
- Capability inventory: The skill has the capability to write security reports to the local filesystem (
security_best_practices_report.md) and perform git commits for remediation purposes (SKILL.md). - Sanitization: The instructions do not specify explicit sanitization or validation steps for content extracted from the codebase before it is included in reports or commit messages.
Audit Metadata