skf-analyze-source
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute subprocesses for directory mapping and deep AST analysis using tools like
ast-grepto identify exports and service boundaries.- [EXTERNAL_DOWNLOADS]: The skill uses the GitHub CLI (gh) to retrieve file contents and manifest data from remote repositories for version detection and structural analysis.- [PROMPT_INJECTION]: The skill analyzes untrusted repository content, creating an indirect prompt injection surface. - Ingestion points: Project manifests and source code files are read and processed in
step-02andstep-04to identify functional units. - Boundary markers: The instructions do not specify the use of delimiters to isolate the analyzed source code content from the agent's instructions.
- Capability inventory: The skill has the capability to execute subprocesses (
step-02,step-04) and write files to the local environment (step-06). - Sanitization: In standard operation, a mandatory confirmation gate in
step-05requires the user to review and approve all recommendations before any output is generated; however, this gate is automatically bypassed whenheadless_modeis enabled.
Audit Metadata