bundle-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill outlines standard developer workflows for measuring bundle composition and size using project-local commands (pnpm bundle-compare, pnpm bundle-analyze).
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points where the agent reads data from packages/tools/bundle/README.md and tmp/bundle-stats.txt to report findings.
  • Ingestion points: packages/tools/bundle/README.md, tmp/bundle-stats.txt (SKILL.md).
  • Boundary markers: None present.
  • Capability inventory: Execution of local pnpm scripts (SKILL.md).
  • Sanitization: None present.
  • Analysis: This is a standard operational surface for a build-analysis tool and does not represent a significant risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:40 AM