sonar-dependency-risks
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the SonarQube CLI ('sonar') to perform API queries and dependency scans. It also invokes container runtime tools ('docker', 'podman', 'nerdctl') to check the status of the required MCP server environment. These operations are consistent with the documented purpose of the skill.
- [EXTERNAL_DOWNLOADS]: The skill fetches software composition analysis data from SonarQube's web API. SonarQube is recognized as a well-known security service, and these network operations are necessary for the skill's primary function.
- [PROMPT_INJECTION]: The skill processes external data that could potentially contain indirect instructions.
- Ingestion points: The repository configuration file 'sonar-project.properties' and dependency risk metadata returned from the SonarQube API.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' markers when handling data retrieved from external sources.
- Capability inventory: The agent is granted access to 'Bash(sonar:*)', allowing for varied command execution.
- Sanitization: There is no evidence of explicit sanitization or validation of the vulnerability descriptions or dependency names before they are incorporated into the agent's context.
Audit Metadata