ascendc-operator-code-review
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates static analysis of Ascend C code by comparing user input against local safety guidelines. It does not execute remote code, access sensitive credentials, or perform unauthorized network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code snippets, which is a potential surface for indirect prompt injection. * Ingestion points: The '代码片段' (Code Snippet) parameter in SKILL.md. * Boundary markers: Absent in the skill instructions. * Capability inventory: Static symbol analysis using LSP and search tools (Grep) as described in SKILL.md. * Sanitization: None identified. The vulnerability is mitigated by the skill's strict scoring and evidence-based reporting requirements.
- [EXTERNAL_DOWNLOADS]: All reference materials are stored locally within the skill's reference directory (01_numeric_operations.md through 07_interface_compatibility.md). No external network requests or script executions were identified.
Audit Metadata