code-tour
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is designed to help users document their codebase using the CodeTour format. No malicious patterns such as prompt injection, obfuscation, or persistence were identified within the instructions or metadata.
- [EXTERNAL_DOWNLOADS]: The skill references the official CodeTour JSON schema from Microsoft and example tours from the code-server repository. These are well-known and reputable sources for the intended functionality.
- [DATA_EXFILTRATION]: The agent is instructed to read codebase files to verify line numbers and paths. This behavior is confined to the specific goal of creating accurate walkthroughs and does not target sensitive system or credential files.
Audit Metadata