backend-security-coder
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a methodology for the agent to process and analyze untrusted external data, specifically code and schemas.
- Ingestion points: The skill processes external "Endpoint code" and "request schemas" as defined in the
resources/implementation-playbook.mdfile. - Boundary markers: The instructions do not specify the use of delimiters (e.g., triple backticks or XML tags) or specific "ignore embedded instructions" warnings when handling user-provided code samples.
- Capability inventory: While the skill itself is instructional, the agent utilizing it generally possesses file-read and code-analysis capabilities which could be influenced by malicious instructions embedded within the analyzed source code.
- Sanitization: There is no requirement for the agent to sanitize, escape, or validate the content of the provided code or schemas before processing them.
Audit Metadata