production-review
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to utilize standard search tools like
ripgrep(rg) to identify security vulnerabilities and misconfigurations. These commands are static, targeted at auditing the provided codebase, and represent expected functionality for a security review skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data in the form of third-party source code and configuration files, which is an inherent part of its auditing function.\n - Ingestion points: Codebase files such as
requirements.txt,package.json, and application source files are scanned to identify potential issues (defined inSKILL.md).\n - Boundary markers: There are no explicit instructions for the agent to use delimiters or protective wrappers when processing the content of these files.\n
- Capability inventory: The skill uses diagnostic search commands and generates text-based reports; it does not contain instructions for performing network data exfiltration or unauthorized file system modifications.\n
- Sanitization: The instructions do not include specific logic to sanitize or filter potential malicious prompts embedded within the code being analyzed.
Audit Metadata