offensive-request-smuggling
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is the analysis of external, potentially untrusted data such as source code, binaries, and network traffic traces, which represents an indirect injection attack surface.
- Ingestion points: The workflow involves analyzing source code, binaries, bundle recoveries, and web surfaces as defined in Phase 1 (Surface & Architecture Inventory).
- Boundary markers: The instructions do not specify explicit delimiters or guardrails to prevent the agent from executing instructions potentially embedded in analyzed files.
- Capability inventory: The skill leverages external tools for binary disassembly, web bundle recovery, and AST analysis, as well as shell-based tools like
rgandnpm test. - Sanitization: No specific sanitization or validation logic for the external audit data is described in the workflow.
- [NO_CODE]: The skill files consist entirely of Markdown documentation and YAML configuration. No scripts, binaries, or automated execution logic are provided within the skill package.
Audit Metadata