codebase-exploration

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were identified. The skill's operations are confined to codebase exploration and writing documentation to a local file.
  • [SAFE]: The skill possesses an indirect prompt injection attack surface because it processes untrusted content from the codebase it is exploring.
  • Ingestion points: The skill uses search and read tools to ingest files and logic from the local repository as defined in the workflow section of SKILL.md.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore instructions embedded within the codebase files.
  • Capability inventory: The skill has access to several tools including execute, edit, search, and agent as defined in the YAML frontmatter of SKILL.md.
  • Sanitization: No explicit sanitization, validation, or filtering of the repository content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 03:33 AM