security-bounty-hunter
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions are purely functional and oriented toward professional security auditing and bug bounty research. The provided commands and workflows are standard industry practices.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted third-party source code from external repositories, which creates a potential surface for indirect prompt injection.
- Ingestion points: The skill workflow involves scanning repositories and reading source code to identify vulnerabilities (SKILL.md, Workflow section).
- Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore instructions embedded within the scanned code.
- Capability inventory: The skill suggests using the agent's ability to run shell commands (e.g.,
semgrep) and perform file-read operations to confirm exploitability. - Sanitization: The skill does not implement specific sanitization or filtering of the external code before the agent processes it.
- Context: This risk is inherent to the primary purpose of the skill (security auditing) and does not represent a malicious intent within the skill itself.
Audit Metadata