cpp-formatter
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes clang-format for source code analysis and formatting on the local filesystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository source code, which constitutes a potential surface for indirect instructions.
- Ingestion points: C/C++ source files located in specified repository directories such as crates/perfect-db/csrc/.
- Boundary markers: Instructions mandate the use of explicit, quoted paths for file selection to maintain boundaries.
- Capability inventory: Execution of clang-format and local file modification capability using the -i flag.
- Sanitization: The skill instructs the agent to manually review resulting diffs for unrelated or suspicious changes.
Audit Metadata