radar-suite-axis-classification
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. As a framework for auditing codebases, the skill is designed to process untrusted data. Malicious patterns in the audited code could attempt to influence the agent's coaching logic or classification process.
- Ingestion points: Audited project files accessed via the
Read,Grep, andGlobtools. - Boundary markers: Findings are required to follow a strict YAML schema with specific axis labels and audience tags.
- Capability inventory: The skill is restricted to file system reading and searching tools (
Read,Grep,Glob) and does not have native network access. - Sanitization: The skill implements a 'Schema Gate' that uses regular expressions to validate that file citations in the
better_approachfield are correctly formatted. - [SAFE]: Informative External Reference. The
radar-suite-core.mdfile suggests the installation of an external tool called 'Dippy' from a public GitHub repository (ldayton/Dippy) to assist with path-handling in shell commands. This is presented as an instruction to the user rather than an automated execution. - [SAFE]: Least Privilege Tooling. The skill's YAML frontmatter restricts
allowed-toolsto standard file system operations, preventing the framework from executing arbitrary code or performing unauthorized network activity.
Audit Metadata