elegant-code
Fail
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill contains a reference to a URL (https://www.softwareseni.com/ai-generated-code-security-risks-why-vulnerabilities-increase-2-74x-and-how-to-prevent-them/) in 'references/sources.md' that has been flagged as malicious (Scam) by automated security scanners.
- [COMMAND_EXECUTION]: The 'SKILL.md' file includes shell verification hooks that execute local developer tools like 'knip', 'vulture', and 'cargo-udeps'. While these are standard tools and are guarded by checks to ensure they are installed, they represent the execution of local binaries.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (diffs and new files) which constitutes an attack surface.
- Ingestion points: Files and code diffs provided for review or addition (SKILL.md).
- Boundary markers: None explicitly defined to separate untrusted code from agent instructions.
- Capability inventory: Shell execution capabilities using 'rg', 'knip', 'vulture', and 'cargo' (SKILL.md).
- Sanitization: No input validation or escaping mechanisms are specified for the processed content.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata