gitnexus-impact-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to run 'npx gitnexus analyze' when the analysis index is stale. This command downloads and executes the 'gitnexus' package from the NPM registry.
- [COMMAND_EXECUTION]: The skill utilizes terminal commands ('npx') and specialized analysis functions ('gitnexus_impact', 'gitnexus_detect_changes') to perform deep code inspection and dependency mapping within the repository.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes untrusted data from the repository, such as source code, commit messages, and git diffs. However, the output is structured for risk assessment, which limits the potential for instruction overriding.
Audit Metadata