sast-xss
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external codebases, which inherently introduces a surface for indirect prompt injection where malicious code could attempt to influence the agent's analysis or reporting.
- Ingestion points: The skill reads source files from the project being analyzed and uses a project architecture summary (sast/architecture.md) as context.
- Boundary markers: The instructions do not define specific delimiters or instructions to treat codebase content as untrusted data to be ignored if it contains natural language instructions.
- Capability inventory: The skill has the ability to read files from the codebase, write analysis reports to the local file system (sast/ directory), and spawn subagents with delegated instructions.
- Sanitization: There is no explicit sanitization or filtering of the codebase content before it is processed by the agent or its subagents.
Audit Metadata