security-bounty-hunter
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent must process untrusted repository content, creating an attack surface for indirect prompt injection where malicious instructions could be embedded in code or comments.
- Ingestion points: The skill instructs the agent to read source code, HTTP handlers, and background job definitions in repositories (SKILL.md).
- Boundary markers: There are no instructions provided to treat the analyzed code as data or to use specific delimiters to prevent the agent from following instructions found within the code.
- Capability inventory: The agent is authorized to use security tools (like semgrep) and read files to perform its analysis.
- Sanitization: No sanitization or filtering logic is specified for the data being ingested from the target repositories.
Audit Metadata