c-cleanup
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a comprehensive guide for improving C code quality, focusing on memory safety, MISRA-C compliance, and dead code removal. It includes instructional code samples for preventing common vulnerabilities like buffer overflows and memory leaks.
- [COMMAND_EXECUTION]: The skill instructs the agent to run local shell commands using standard development tools such as
gcc,make,cppcheck,clang-tidy, andvalgrind. These commands are used as intended for static analysis and runtime memory debugging of the user's project. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to process and analyze user-provided C source files. Untrusted data enters through source files in the local workspace (Ingestion points), and the agent performs operations like compilation and execution via
makeandvalgrind(Capability inventory) without explicit boundary markers or content sanitization. This is a common characteristic of development-oriented skills.
Audit Metadata