noise-protocol
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute a locally provided Python script (
scripts/inspect-project.py) to perform an automated security audit of the user's project code and configuration.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project source code and configuration files, which could contain malicious instructions designed to influence the agent's analysis or behavior.\n - Ingestion points: The
scripts/inspect-project.pyscript reads text from project files (including .c, .py, .rs, .json, and .toml files) using thepath.read_text()method.\n - Boundary markers: There are no explicit delimiters or boundary markers used to separate the content of the analyzed files from the agent's internal instructions.\n
- Capability inventory: The agent has the capability to execute the inspection script in the shell and process its JSON-formatted findings to provide design and security guidance.\n
- Sanitization: The script performs regex matching on raw file content without sanitizing or escaping the text before it is returned for agent processing.
Audit Metadata