review-duplication
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the unilyze dup command to perform token-normalized code clone detection on the local project directory.
- [PROMPT_INJECTION]: The skill processes untrusted project source code as part of its primary duplication analysis function, which represents an indirect prompt injection surface. * Ingestion points: Reads project source files based on locations provided in the clones.md report. * Boundary markers: Does not implement explicit boundary markers or instructions for the agent to ignore potentially malicious instructions embedded in the analyzed code. * Capability inventory: Executes local shell commands (unilyze) and writes findings to the file system (duplication-findings.md). * Sanitization: Does not sanitize or escape the content of the project source files before they are processed by the agent.
Audit Metadata