backend-security-coder
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user inputs, requirements, and code snippets to generate backend logic, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through user queries, feature requirements, and existing code blocks provided during the chat session.
- Boundary markers: The instructions lack explicit delimitation (e.g., XML tags or specific block markers) to help the agent distinguish between its core instructions and potentially adversarial instructions embedded in user-provided data.
- Capability inventory: The skill is authorized to generate security-sensitive code for database access, API authentication (JWT/OAuth), and file system operations, which could be exploited if the agent is manipulated by embedded instructions.
- Sanitization: There are no internal sanitization or validation instructions defined for the agent to filter or verify the integrity of external data before processing.
Audit Metadata