check-crypto-usage
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill analyzes external PHP source code, creating an indirect prompt injection surface where adversarial instructions embedded in code comments or string literals could attempt to influence the agent's behavior.
- Ingestion points: Third-party PHP source files processed by the skill (e.g., **/*.php).
- Boundary markers: No delimiters or 'ignore instructions' warnings are provided in the prompt templates.
- Capability inventory: The skill is restricted to static pattern matching and security analysis using grep-style patterns.
- Sanitization: No sanitization or filtering of the ingested code content is performed prior to analysis.
Audit Metadata