offensive-wps
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves the ingestion and analysis of external data sources, including source code, binaries, and configuration files. This creates a surface for indirect prompt injection if an attacker embeds malicious instructions within the materials being audited.
- Ingestion points: The skill instructs the agent to perform static code/binary inspection and runtime configuration verification (SKILL.md).
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the data being analyzed.
- Capability inventory: The skill leverages file search tools (rg) and binary disassembly/analysis tools mentioned in the integration section (SKILL.md).
- Sanitization: No sanitization or validation protocols for the external data are defined in the instructions.
Audit Metadata