senior-backend
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides Python scripts (
api_load_tester.py,api_scaffolder.py,database_migration_tool.py) that serve as templates for backend tasks. These scripts perform basic path validation and dummy analysis with no network operations, sensitive file access, or dynamic code execution. - [SAFE]: The documentation files in the
references/directory contain legitimate backend design patterns, security best practices, and optimization guides. No prompt injection or malicious instructions were found in the text. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze local project directories. This represents a potential surface for indirect prompt injection if the agent were to process malicious content within a target codebase, however, the current implementation lacks data interpolation or evaluation logic that would make it exploitable.
- [SAFE]: Command usage examples in
SKILL.md(e.g.,npm install,pip install,docker build) are standard development workflows and do not point to untrusted external sources or unauthorized privilege escalation.
Audit Metadata