authentication
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements an automated security review flow that processes untrusted code via an LLM, creating a surface for indirect prompt injection attacks. \n
- Ingestion points: User-provided code snippets or flow descriptions are interpolated directly into the prompt template within the security analysis script in SKILL.md. \n
- Boundary markers: The provided prompt template lacks explicit delimiters or instructions to ignore embedded commands within the analyzed code. \n
- Capability inventory: The skill has access to tools like
Bash,WebFetch, andWebSearch, and the analysis script makes network calls to the Anthropic API. \n - Sanitization: The implementation lacks validation or sanitization of the input content before processing. \n- [COMMAND_EXECUTION]: The troubleshooting section of the skill documentation provides example shell commands, including
python -candopenssl, intended for user diagnostics and local verification of authentication tokens.
Audit Metadata