targetify

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository's file system, including git history, logs, and README files, to perform its analysis. * Ingestion points: Reads local repository files such as README, AGENTS.md, manifests, and command outputs from git log and git status. * Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the files being analyzed. * Capability inventory: The skill utilizes local CLI tools including git and rg for data retrieval. It lacks capabilities to write to the filesystem, perform network operations, or execute code. * Sanitization: There is no evidence of sanitization or filtering applied to the content read from the repository before processing.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute local command-line tools to gather repository statistics and history. * Evidence: Uses git log --stat, git blame, git status --short, and rg (ripgrep) to collect data for scoring targets. These are used for read-only inspection as defined in the skill's workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 01:41 PM