gitnexus-debugging
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends running
npx gitnexus analyzeto update the search index. This command downloads and executes thegitnexusutility from the npm registry. - [COMMAND_EXECUTION]: Users are instructed to run
npx gitnexus analyzein their terminal to resolve stale index errors. This provides a mechanism for local command execution to perform repository analysis. - [PROMPT_INJECTION]: The skill processes potentially untrusted external data (error logs and source code) to identify bugs, creating an attack surface for indirect prompt injection.
- Ingestion points: Error messages and symptom descriptions passed to
gitnexus_queryin SKILL.md, as well as source code content read during the trace. - Boundary markers: No specific delimiters or safety instructions are used in the skill to separate untrusted data from agent instructions.
- Capability inventory: The agent instructions include suggesting shell command execution via the terminal tool.
- Sanitization: There is no evidence of sanitization or validation of the input data before it is processed by the agent.
Audit Metadata