create-message-broker-adapter
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates a
DomainEventHandlerinreferences/examples.mdthat derives class names from theevent_typeheader of incoming messages, which is a potential surface for indirect prompt injection.\n - Ingestion points: Message headers and JSON body processed in
references/examples.md.\n - Boundary markers: Absent; the generated logic does not include delimiters or instructions to ignore embedded commands.\n
- Capability inventory: The infrastructure layer in
references/templates.mdcontains code for network operations with RabbitMQ, Kafka, and SQS brokers.\n - Sanitization: Includes a
class_existscheck to ensure the derived class name is valid before instantiation.
Audit Metadata