sbom-supply-chain
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
@cyclonedx/cdxgentool globally from the npm registry. It also references well-known GitHub Actions from Docker and Sigstore for CI/CD integration, which are standard components of modern security pipelines. - [COMMAND_EXECUTION]: The skill documents the use of various command-line utilities for security auditing and signing, such as
syft,cdxgen,grype,cosign, andtrivy. These are standard tools for generating and verifying software provenance and vulnerability data. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external metadata from container images and signed attestations, creating an interface for processing potentially untrusted third-party data.
- Ingestion points: Processes artifact metadata and in-toto attestations extracted from external container images or repositories.
- Boundary markers: The skill includes clear instructional warnings to "never execute" decoded payload data from attestations.
- Capability inventory: The skill uses shell execution to run security scanners and artifact signing tools.
- Sanitization: The skill relies on external policy-as-code frameworks (Kyverno, OPA) for validation rather than providing internal sanitization for the metadata it processes.
Audit Metadata