ln-628-concurrency-auditor
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches audit contracts and reference documentation from the author's repository at github.com/levnikolaevich/claude-code-skills using WebFetch. This is a standard procedure for maintaining current audit rules and does not involve executable code downloads.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) when analyzing third-party codebases.
- Ingestion points: The skill uses Grep and Read tools to ingest code content during its multi-layer detection workflow.
- Boundary markers: Absent. There are no instructions to use delimiters or ignore embedded instructions when reading code files.
- Capability inventory: The agent has access to powerful tools including Bash and file system read tools.
- Sanitization: Absent. The skill does not implement validation or escaping for the data read from the codebase before processing it with the LLM.
Audit Metadata