appsec-agent
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data to determine its orchestration flow.\n
- Ingestion points: Reads project build configurations (Maven, Gradle, Go), SARIF analysis reports, and YAML files containing external method signatures.\n
- Boundary markers: None explicitly implemented for external data interpolation, relying on the agent's logic and structured YAML parsing.\n
- Capability inventory: The skill performs file system writes, dispatches subagents, and executes system utilities (git, jar, javap).\n
- Sanitization: Uses yaml.safe_load for parsing and employs a deterministic hashing algorithm to generate sanitized filenames from external rule IDs.\n- [COMMAND_EXECUTION]: Uses system utilities to extract metadata and system resource information.\n
- Evidence: Executes git rev-parse HEAD for version tracking, jar tf and javap -c for Java class analysis, and sysctl for memory availability checks.\n
- Security posture: All commands use list-based arguments, avoiding shell injection risks.\n- [EXTERNAL_DOWNLOADS]: Mentions the installation of the official OpenTaint toolchain.\n
- Evidence: Provides instructions for brew install and npm install of @seqra/opentaint packages, which are resources from the authoring vendor.
Audit Metadata