cloud-dependency-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, credentials, or unauthorized network activities were found. The code follows standard practices for a CLI-based processing tool.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes data from external files.
- Ingestion points: run.py reads JSON content from an external file via the --input parameter.
- Boundary markers: No boundary markers or instructions to ignore embedded commands are present in the processing logic.
- Capability inventory: The script utilizes pathlib for file reading and writing in run.py.
- Sanitization: The script parses JSON but does not perform content-level sanitization of the input data.
Audit Metadata