context-audit
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository, including context files (e.g., CLAUDE.md, .cursorrules) and source code, which could contain malicious instructions designed to influence the audit results or remediation suggestions.
- Ingestion points: Context files, source code, and package manifests (package.json, Cargo.toml, etc.) found in the analyzed repository via tools like Glob and Grep.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the subagent analysis phase.
- Capability inventory: The skill utilizes file system discovery, file reading, subagent spawning, and file writing for the remediation phase.
- Sanitization: There is no evidence of specific sanitization or filtering of the content read from the repository before it is passed to the analysis subagents.
Audit Metadata