research
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
cat,jq,rg, andtestto extract dependency versions and verify code patterns within the local repository. - [EXTERNAL_DOWNLOADS]: Interacts with GitHub via the
ghCLI to store research findings and performs web searches for technical documentation and breaking changes. - [PROMPT_INJECTION]: The skill ingests untrusted data from the repository, creating an indirect prompt injection surface. Ingestion points: Reads
package.json,requirements.txt,Cargo.toml, anddocs/solutions/. Boundary markers: No explicit boundary markers or isolation for the read content are defined. Capability inventory: Usescat,jq,rg,test, andghfor file access and external reporting. Sanitization: Content is processed as-is without specific sanitization steps before analysis.
Audit Metadata