create-research
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a rigorous process for generating evidence-backed documentation of existing codebases. It relies on standard developer tooling (such as
lsandgh) and emphasizes read-only repository analysis. No evidence of prompt injection, malicious persistence, unauthorized command execution, or data exfiltration was detected. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze codebase repository content, which represents a surface for indirect prompt injection. This risk is mitigated by the 'research protocol' which establishes a 'protected-file boundary', defines clear 'source precedence', and utilizes a 'coverage ledger' to ensure all findings are traceable to specific line ranges and evidence, rather than interpreted as instructions.
Audit Metadata