audit-service-gaps
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a logical framework for auditing services against baselines. Analysis of the provided files reveals no hardcoded credentials, remote code downloads, or persistence mechanisms. The workflow relies on manual evidence collection and respects platform-defined permission boundaries.\n- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its core function of processing external service artifacts.\n
- Ingestion points: Service current state, deployment metadata, and active documentation (SKILL.md, workflow Step 2).\n
- Boundary markers: Absent; instructions do not provide explicit delimiters or warnings to separate audited data from agent instructions.\n
- Capability inventory: The skill does not define or request any tools, executable scripts, or network egress capabilities, minimizing the impact of potential injections.\n
- Sanitization: Absent; the skill does not perform or suggest validation, escaping, or filtering of ingested service data.
Audit Metadata