supply-chain-security
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the official installation script for the Syft SBOM tool from Anchore's public GitHub repository.
- [REMOTE_CODE_EXECUTION]: Instructs the installation of several security CLI tools, including OSV-Scanner from Google's GitHub repository and Cosign from the Sigstore project, using standard language package managers like Go and NPM.
- [COMMAND_EXECUTION]: Executes a variety of local security scanners and container audit tools such as Trivy, Snyk, and Hadolint to evaluate the security posture of project artifacts and configurations.
- [DATA_EXFILTRATION]: Outlines procedures for secret discovery using Gitleaks and provides examples for uploading security reports to external management platforms via API, using standard secret management practices for authentication.
- [PROMPT_INJECTION]: The skill processes external codebase metadata and dependency manifests, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Processes local file system contents, container image layers, and dependency manifest files (e.g., package.json, requirements.txt).
- Boundary markers: The instructions do not include specific delimiters or warnings to ignore embedded instructions in the analyzed data.
- Capability inventory: The skill utilizes shell access, network communication, and package management for its core operations.
- Sanitization: No explicit sanitization or filtering of the ingested external content is defined within the skill's instructions.
Audit Metadata