spine-recon
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform environment discovery and dependency identification using commands likels -a. - [PROMPT_INJECTION]: The skill ingests and analyzes local source code and configuration files, creating a surface for indirect prompt injection if the audited codebase contains malicious instructions. \n
- Ingestion points: Local project files, including source code, READMEs, and configuration manifests (e.g.,
package.json,pyproject.toml). \n - Boundary markers: No delimiters or protective instructions are used to isolate ingested content from the assessment logic. \n
- Capability inventory: Access to
Bashfor environment detection,Readfor file content access, andWebFetchfor potential external resource validation. \n - Sanitization: No content validation or sanitization steps are documented before processing the gathered data.
- [DATA_EXFILTRATION]: Architectural discovery data, including detailed endpoint maps and authentication logic specifications, is consolidated into an HTML report via the
/atlas-reportcommand.
Audit Metadata