api-review
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of reading untrusted source code and configuration files. Ingestion points: entire project codebase, package manifests, and route definitions. Boundary markers: absent. Capability inventory: broad file system read access for code analysis. Sanitization: absent.
- [NO_CODE]: The skill consists primarily of natural language instructions and does not include executable scripts or binaries.
Audit Metadata