ln-637-test-structure-auditor
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes untrusted data from the repository being audited.
- Ingestion points: The workflow parses
testFilesMetadataand utilizesGlobandGrepto scan directory structures and file contents within theSKILL.mdfile's context. - Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between the auditor's logic and potentially malicious instructions embedded in the scanned files.
- Capability inventory: The skill has access to
Bash,Read, andWritetools (documented in SKILL.md), which provide a significant capability surface if the agent is manipulated via injected content. - Sanitization: No evidence of sanitization, escaping, or validation of the codebase data is present before the information is processed by the auditing logic.
Audit Metadata