pentest
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements strong safety guardrails in its 'DO NOT' section, explicitly prohibiting the execution of exploits, the modification of source code, the installation of external tools, and the making of network requests.
- [SAFE]: The 'Hardcoded Secrets' phase (Phase 8) includes a requirement to redact full secret values, showing only the first four characters to prevent credential exposure during the reporting process.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it analyzes untrusted project code.
- Ingestion points: Project source code files in the current working directory and user-supplied arguments in the $ARGUMENTS variable.
- Boundary markers: Absent. No specific delimiters or 'ignore' instructions are used to isolate the untrusted code content from the agent's instructions.
- Capability inventory: File system reads for analysis, route mapping, and writing execution metadata to telemetry logs in the ~/.claude/projects/ directory.
- Sanitization: Absent. The agent is instructed to analyze the raw content of the code files.
Audit Metadata