codepulse-plm
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection by processing untrusted data from the codebase and outputting it into an HTML format.\n
- Ingestion points: The skill is instructed to use the entire codebase as its context (SKILL.md).\n
- Boundary markers: No boundary markers or warnings to disregard instructions within the source data are provided to the agent.\n
- Capability inventory: The skill has the capability to write HTML reports to the local file system at
codepulse-plm/reports/(SKILL.md).\n - Sanitization: There are no instructions or scripts provided to sanitize, escape, or validate content extracted from the codebase before it is interpolated into the HTML template (
references/report-template.html).
Audit Metadata