code-security-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze untrusted external codebases, which inherently introduces a surface for indirect prompt injection. Malicious instructions within the analyzed files could attempt to manipulate the security audit report. Ingestion points: Analyzes source code, dependency manifests (package.json, requirements.txt, etc.), build scripts, and configuration files as specified in SKILL.md. Boundary markers: The skill does not define specific text delimiters or escaping mechanisms for the code content being reviewed. Capability inventory: The skill performs static text analysis only; it does not include executable scripts or perform network/file system writes. Sanitization: No explicit sanitization or filtering of the analyzed code content is described in the instructions.
- [SAFE]: The skill instructions emphasize a safe, non-executable approach to code analysis, explicitly forbidding the execution of untrusted code and focusing on static analysis patterns.
Audit Metadata