spatie-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a static knowledge base for security guidelines. It does not contain any executable scripts, command-line instructions, or platform-level tool configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill is intended to be used while reviewing external applications, databases, and server configurations, creating a potential surface for indirect prompt injection.
- Ingestion points: The agent reviews user-provided codebases, database schemas, and infrastructure setup files as instructed in
SKILL.md. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined in the skill body.
- Capability inventory: The skill does not define or request any specific tools for file writing, network access, or command execution; it provides conceptual guidance only.
- Sanitization: No sanitization or validation logic is present in the skill to handle external content.
Audit Metadata