technical-debt-assessment

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns detected. The skill contains utility code for technical debt calculation and a static code analysis tool.
  • [DATA_EXPOSURE]: The CodeQualityScanner in references/code-quality-scanner.md uses the fs module to read files for analysis. This is limited to identifying code smells (e.g., magic numbers, long functions) and does not exhibit patterns of sensitive data exfiltration or unauthorized file access beyond its declared purpose of scanning project directories.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes code files which could contain untrusted input (e.g., TODO comments in source code), it treats this data as text for analysis and does not execute instructions found within the scanned content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — technical-debt-assessment