tech-debt-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes Python scripts (
detect_code_smells.pyandanalyze_dependencies.py) designed to perform static analysis on a user's local codebase. The scripts identify code smells (e.g., complexity, large files) and dependency issues (e.g., deprecated packages, version constraints). These scripts operate entirely locally, performing no network requests or sensitive file access. - [DYNAMIC_EXECUTION]: A dynamic import of the standard
datetimelibrary was detected inscripts/detect_code_smells.py. This is used exclusively to generate a timestamp for the generated analysis report and does not pose a security threat. - [INDIRECT_PROMPT_INJECTION]: The skill ingests project source code to generate reports for the agent. While this creates a potential surface for indirect prompt injection if a codebase contained malicious instructions, the risk is negligible as the scripts perform structured analysis and the functionality is limited to reporting code metrics.
Audit Metadata