skills/aeondave/malskill/cpp-patterns/Gen Agent Trust Hub

cpp-patterns

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied C++ source code and pull request details, which is an inherent attack surface for indirect prompt injection through comments or metadata. * Ingestion points: User-provided C++ source files and PR descriptions (referenced in SKILL.md). * Boundary markers: No explicit boundary markers or safety warnings for embedded instructions are provided in the skill instructions. * Capability inventory: The skill utilizes subprocess execution for standard developer tools including compilers, debuggers, and profilers (found in references/tooling-build.md and references/concurrency.md). * Sanitization: The instructions do not define sanitization procedures for the external code being analyzed.
  • [COMMAND_EXECUTION]: The skill provides command templates for standard system diagnostic and binary inspection tools. * Evidence: The skill suggests the use of tools like objdump, nm, readelf, strace, and valgrind for legitimate debugging, profiling, and binary analysis tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 04:09 AM