security-app-api
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data, such as source code, API schemas, and routing definitions, which could potentially contain malicious instructions. However, the skill incorporates extensive guardrails to mitigate this risk, including mandatory redaction of sensitive data via a specialized SDK and strict non-destructive testing boundaries that prevent the agent from executing arbitrary or harmful commands based on input data.
- [DATA_EXPOSURE]: The skill defines clear sensitive data rules that prohibit the reading of environment files (.env), secrets directories, and private keys (*.pem, *.key). It also mandates the redaction of tokens, API keys, and real user identifiers in any output generated by the agent.
- [COMMAND_EXECUTION]: While the skill allows the use of the Bash tool, its instructions are strictly limited to static analysis tasks such as grepping for route definitions and inspecting configuration files. It explicitly forbids active exploitation, fuzzing, or any destructive operations against production environments.
Audit Metadata