offensive-xss
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for auditing external frontend code, DOM sinks, and web bundles. This creates a vulnerability surface where malicious instructions embedded in the audited code could attempt to influence the agent's behavior or output.
- Ingestion points: The skill methodology requires the agent to read and analyze third-party source code and architecture inventory (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from obeying instructions found within the audited material.
- Capability inventory: The agent is given the capability to generate production-ready remediation code and automated regression tests.
- Sanitization: No sanitization or validation steps are defined for the input data before it is processed by the agent.
Audit Metadata