aws-architecture
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local binary located at
/home/bjorn/.codex/skill-support/bin/repo-inventoryfor repository analysis. - [EXTERNAL_DOWNLOADS]: The skill is configured to use the
exaMCP tool for performing platform research. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its processing of untrusted repository data.
- Ingestion points: The skill reads the
AGENTS.mdfile and repository inventory data as specified inSKILL.md. - Boundary markers: Absent; the skill does not provide delimiters or instructions to ignore embedded commands within the ingested files.
- Capability inventory: The skill can execute local binaries and perform external searches via the
exatool. - Sanitization: Absent; no validation or filtering of external content is defined.
Audit Metadata