warden-lint-judge
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill identifies a surface for indirect prompt injection because it ingests and processes 'prior findings' (untrusted data) to generate code suggestions and configuration diffs.
- Ingestion points: Processes 'prior findings' data and reads local project files using
Read,Grep, andGlob. - Boundary markers: Absent; the skill does not define delimiters or specific 'ignore embedded instruction' warnings for the content of prior findings.
- Capability inventory: Limited to file system discovery (
Glob), pattern matching (Grep), and reading (Read). It outputs asuggestedFixwhich may contain code or configuration changes to be applied by external tools. - Sanitization: No explicit sanitization or validation of the content within 'prior findings' is described in the logic.
Audit Metadata