vibe-code-research
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze potentially untrusted user-supplied artifacts.
- Ingestion points: User-provided excerpts, logs, and source material as defined in the Evidence Universe Gate.
- Boundary markers: Implements an 'Evidence Universe Gate' and 'Closed-corpus mode' to prevent external data from influencing or accessing the local workspace.
- Capability inventory: Accesses the local filesystem via read-only inspection and version control tools (git log, git blame).
- Sanitization: Enforces mandatory redaction of credentials and tokens at the output boundary.
- [COMMAND_EXECUTION]: Utilizes read-only git subcommands for historical evidence gathering. The skill explicitly forbids commands that would mutate repository state or install external dependencies.
Audit Metadata