trivy-vulnerability-scanner
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze and triage results from scanning external codebases, container images, and Kubernetes manifests. These external sources could contain malicious content designed to influence the agent's reasoning.
- Ingestion points: Untrusted data enters the context through the output of
trivy repo,trivy fs,trivy image, andtrivy k8scommands (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded instructions within the scan data.
- Capability inventory: The skill performs shell execution of the
trivyCLI tool (SKILL.md). - Sanitization: There is no explicit requirement for the agent to sanitize or validate the external scan results before processing them.
- [COMMAND_EXECUTION]: The skill relies on shell command execution to interact with the
trivysecurity tool for scanning filesystems, repositories, and images.
Audit Metadata