gitnexus-guide
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a specific instruction to execute a local script via the terminal:
node .gitnexus/run.cjs analyze. This command is intended to refresh the codebase index needed for the tool's functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process information from external codebases, creating a surface for indirect prompt injection if the analyzed code contains malicious instructions.\n - Ingestion points: Data is ingested through
gitnexus://URI resources and the outputs of tools that query the repository's knowledge graph (SKILL.md).\n - Boundary markers: There are no instructions or delimiters specified to help the agent distinguish between codebase metadata and potential malicious instructions embedded in the code.\n
- Capability inventory: The skill enables terminal command execution for indexing, raw Cypher graph queries, and multi-file coordinated code refactoring (SKILL.md).\n
- Sanitization: The documentation does not describe any sanitization, escaping, or filtering processes for the data retrieved from the analyzed repositories.
Audit Metadata