offensive-oauth
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data including source code, binaries, and configuration files, creating an attack surface for indirect prompt injection.
- Ingestion points: The workflow involves identifying entrypoints, trust boundaries, parsers, and configuration files for static and runtime inspection (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters provided to prevent the agent from following instructions embedded within the analyzed data.
- Capability inventory: The skill utilizes tools for binary disassembly, decompilation, and executing toolchain builds and test suites (SKILL.md).
- Sanitization: No sanitization or filtering of the analyzed content is described.
- [DYNAMIC_EXECUTION]: The operational workflow includes executing automated regression tests and toolchain builds (e.g.,
npm test) on the project being audited, which involves running code from an external, potentially untrusted source.
Audit Metadata