offensive-wpa-enterprise
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to audit untrusted external data, such as binaries and source code, which could contain malicious instructions designed to subvert agent behavior. \n
- Ingestion points: The workflow involves 'static code/binary inspection', 'AST analysis', and 'decompilation' as defined in the Operational Workflow (SKILL.md). \n
- Boundary markers: The instructions do not provide explicit delimiters or guidelines to ignore embedded instructions within the processed data. \n
- Capability inventory: The skill mentions invoking various analysis tools (e.g., 'rea-universal-orchestrator') and running project test suites (SKILL.md). \n
- Sanitization: There are no requirements or methods specified for sanitizing input data before analysis. \n- [COMMAND_EXECUTION]: The operational checklist instructs the agent to run build and testing commands, specifically 'npm test', during the vulnerability remediation phase (SKILL.md).
Audit Metadata