check-sensitive-data
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the grep command-line tool to search for vulnerability patterns within source code files.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted PHP source files. 1. Ingestion points: PHP files specified in grep patterns. 2. Boundary markers: No specific delimiters are used to separate code from instructions. 3. Capability inventory: Uses grep for file searching and reports findings in markdown. 4. Sanitization: No input validation or escaping is performed on the content of the scanned files.
- [CREDENTIALS_UNSAFE]: The skill documentation includes dummy credentials like 'SuperSecret123!' and placeholder API keys to illustrate hardcoded secret patterns.
Audit Metadata