aws-architecture

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute a local binary located at /home/bjorn/.codex/skill-support/bin/repo-inventory for repository analysis.
  • [EXTERNAL_DOWNLOADS]: The skill is configured to use the exa MCP tool for performing platform research.
  • [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its processing of untrusted repository data.
  • Ingestion points: The skill reads the AGENTS.md file and repository inventory data as specified in SKILL.md.
  • Boundary markers: Absent; the skill does not provide delimiters or instructions to ignore embedded commands within the ingested files.
  • Capability inventory: The skill can execute local binaries and perform external searches via the exa tool.
  • Sanitization: Absent; no validation or filtering of external content is defined.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 04:55 AM