ai-security-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational content and defensive implementation patterns for securing AI systems. It follows standard security best practices for LLM deployments, such as PII anonymization and rate limiting.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture for processing untrusted user input, which is a known attack surface for indirect prompt injection.
- Ingestion points: User input is ingested via the
chatendpoint and processed by thesanitize_user_inputfunction inSKILL.md. - Boundary markers: The skill includes documentation explicitly stating that regex-based detection does not establish a security boundary and advises developers to keep untrusted content separate.
- Capability inventory: The demonstrated code involves calling an LLM and performing content filtering.
- Sanitization: The skill provides a
sanitize_user_inputimplementation that removes control characters and applies regex filters to detect common injection patterns.
Audit Metadata