sast-ssti
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted codebase content, which creates a theoretical surface for indirect prompt injection if the scanned code contains adversarial instructions designed to influence the scanning agent's behavior.
- Ingestion points: The skill reads local codebase files and the
sast/architecture.mdfile during its recon and verify phases. - Boundary markers: Absent; the instructions for the subagents do not include specific delimiters or instructions to ignore embedded commands within the analyzed code strings.
- Capability inventory: The skill spawns subagents, reads codebase files, and writes result files into the
sast/directory. - Sanitization: No input sanitization or validation of the codebase content is performed before processing, which is standard behavior for static analysis tools evaluating raw source code.
Audit Metadata