c-bounds-safety
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of local development tools, including the C compiler (Clang) and version control (git). These commands are standard for the intended task of code adoption and are integrated into a workflow that mandates user review and approval before actions are taken.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data in the form of existing C source code and headers.
- Ingestion points: User-provided C source files (
.c) and header files (.h) accessed via the Read tool. - Boundary markers: The instructions include explicit requirements for the agent to create plans, confirm approaches with the user, and perform step-by-step reviews before committing any changes.
- Capability inventory: The skill has the capability to modify local files, execute git commands for version control, and run project-specific test suites.
- Sanitization: The skill employs strict human-in-the-loop checkpoints, requiring verbatim presentation of plans and explicit approval for all source-code and build-system modifications.
Audit Metadata