production-readiness-review
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data provided by the user (answers to deployment and infrastructure questions) and incorporates it into a traffic-light report. This data then flows into other tools like
triage-findings-list. - Ingestion points: User responses to the target questions defined in
SKILL.md(Section 1). - Boundary markers: Absent. No specific delimiters or safety instructions are used to isolate user-provided data.
- Capability inventory: The skill writes a report file to
.scratchpad/and recommends the execution of external CLI tools (npm audit,pip-audit,composer audit). - Sanitization: Absent. The skill does not specify any validation or sanitization for the user-provided facts and assumptions before inclusion in the final report.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute dependency audit commands (e.g.,
npm audit,pip-audit,composer audit). These are legitimate security practices within the context of a production readiness review but represent the execution of external binaries.
Audit Metadata