vibe-coding-re-analyze
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill identifies and reads files related to authentication logic and environment variable references. This behavior is aligned with its primary purpose of reverse engineering a codebase. There are no network calls or patterns indicating that sensitive data is being exfiltrated to external domains.
- [INDIRECT_PROMPT_INJECTION]: Because the skill reads and processes untrusted source code from a codebase, it is theoretically susceptible to indirect prompt injection if malicious instructions are hidden in the analyzed files. However, the skill's activities are limited to generating a summary and updating a local status file, which minimizes the impact of such an attack.
- [SAFE]: No obfuscation (Base64, zero-width characters, etc.), persistence mechanisms, or unauthorized remote code execution patterns were found. The skill operates locally on the provided project files.
Audit Metadata