rate-limiter
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate architectural and implementation guidance for security middleware. It emphasizes best practices such as layered defense, proper header management, and validation of client IP sources (e.g., handling X-Forwarded-For correctly behind proxies). \n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a functional surface where it analyzes application code and user requirements to generate middleware code. This is a standard capability for developer-focused skills and is addressed through security-centric implementation guidelines. \n
- Ingestion points: Analyzes target application codebases and developer requirements (e.g., framework, endpoints) for middleware generation.\n
- Boundary markers: The instructions do not explicitly mandate delimiters for external application data analysis.\n
- Capability inventory: Generates middleware code that interacts with Redis, manages request routing, and sets HTTP headers.\n
- Sanitization: The skill provides guidance on validating 'X-Forwarded-For' headers and using composite keys to prevent common rate-limiting bypasses.
Audit Metadata