audit-context-building
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of purely instructional content designed to guide the agent's reasoning process during a code audit. It does not contain any executable code, shell commands, or network requests. The instructions focus on improving accuracy and reducing hallucinations during technical analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection as it is intended to process untrusted source code.
- Ingestion points: External source code files analyzed by the agent (SKILL.md).
- Boundary markers: The skill requires strict line-by-line citations, invariants documentation, and explicit marking of uncertainty, which serves to ground the agent in the evidence and mitigate the risk of following embedded instructions.
- Capability inventory: The skill possesses no capabilities for command execution, file system modification, or network communication.
- Sanitization: Not present.
- Given the lack of actionable capabilities and the emphasis on evidence-based discipline, this surface is considered a routine part of the skill's intended purpose.
- [COMMAND_EXECUTION]: No shell commands or dynamic context injection patterns, such as the exclamation mark and backtick syntax used to execute commands at load time, are present in the provided file.
Audit Metadata