lightweight-explorer
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements read-only functionality using standard tools like
rg,sed, andnl. These are used for searching and reading files within the project scope, which is the intended purpose of the skill. - [SAFE]: Explicit guardrails are provided in the instructions to prevent the agent from creating files, modifying the codebase, running installers (
npm install), or using write-oriented commands (mkdir,git commit). This minimizes the risk of accidental or malicious state changes. - [SAFE]: The workflow focuses on reconnaissance and summarizing findings rather than executing code, effectively reducing the risk of indirect prompt injection from codebase content.
Audit Metadata