claude-md-dependency-rescan
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple ingestion points within the project directory, which could contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: The skill reads several manifest files (
package.json,requirements.txt,pyproject.toml,go.mod,Cargo.toml) and documentation files (CLAUDE.md,.claude/rules/*.md). - Boundary markers: There are no explicit boundary markers or instructions to ignore embedded commands within the ingested data defined in the skill instructions.
- Capability inventory: The skill is restricted to read-only capabilities including
Read,Glob,Grep, and specific Bash commandsfindandcatvia theallowed-toolsconfiguration. - Sanitization: The instructions do not specify any sanitization, escaping, or filtering of the content read from external files before processing.
Audit Metadata