distributed-systems
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill templates reference well-known Python packages:
redis,sqlalchemy,fastapi,pydantic,tiktoken, anduuid-utils. These are standard libraries for distributed systems and API development. - [DYNAMIC_EXECUTION]: Static analysis identified an
eval()call inscripts/distributed-lock-template.py. Analysis confirms this is a method call on a Redis client object used to execute hardcoded Lua scripts for atomic locking operations, which is a secure and standard practice. - [COMMAND_EXECUTION]: SQL interactions in
scripts/distributed-lock-template.pyandscripts/idempotency-middleware-template.pyuse parameterized queries via SQLAlchemy'stext()function, protecting against SQL injection during advisory lock and idempotency record management. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface as it ingests untrusted data. 1. Ingestion points:
WebFetchandWebSearchtools (SKILL.md). 2. Boundary markers: Absent in prose-heavy templates. 3. Capability inventory: File reading and network search (SKILL.md). 4. Sanitization: The skill uses cryptographic hashing (SHA-256) to sanitize inputs for idempotency keys.
Audit Metadata