offensive-mitigations
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external software components such as source code, binaries, and configuration files.\n
- Ingestion points: Binary files, source code, and configuration files (SKILL.md).\n
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded in the analyzed data.\n
- Capability inventory: The skill references tools that execute code or perform system operations, including
npm test,checksec,dumpbin, andotool(SKILL.md).\n - Sanitization: No explicit sanitization or validation of the external content is mentioned.\n- [COMMAND_EXECUTION]: The audit workflow includes executing shell commands and testing suites (
npm test) against the code being audited, which is a standard part of security remediation but requires caution when used on untrusted targets.
Audit Metadata