night-market-diagnostics-toolkit
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The toolkit consists of diagnostic utilities that perform read-only health measurements of the repository. No malicious patterns, persistence mechanisms, or unauthorized data access were detected in the analyzed instructions or scripts.
- [EXTERNAL_DOWNLOADS]: The
check_pinned_versions.pyscript queries the GitHub API to compare local tool versions with upstream releases. This network activity is limited to a trusted service and is intended for maintaining security through updated dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository metadata, documentation, and lockfiles. While this creates a potential surface for indirect injection if malicious content were placed in these files, the risk is mitigated as the tools output structured metrics (counts, PASS/FAIL status) for the agent's interpretation rather than echoing raw, potentially executable content.
Audit Metadata