caveman-discover
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inventory a repository by scanning source code, scripts, and configuration files. This creates a vulnerability surface where malicious instructions hidden in the code could influence agent behavior.
- Ingestion points: The agent is directed to read repository entry points, HTTP/RPC handlers, cron definitions, and CLI scripts (SKILL.md).
- Boundary markers: The skill does not provide specific delimiters or instructions to ignore embedded commands within the analyzed code.
- Capability inventory: The agent has the authority to modify source code, update SDK configurations, and change environment variables.
- Sanitization: There are no instructions for the agent to sanitize or escape data retrieved from the repository before it is processed or used to generate code modifications.
Audit Metadata