context-budget
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates an ingestion surface by scanning and analyzing the text contents of various project files to estimate token consumption.
- Ingestion points: Processes content from local files including
agents/*.md,skills/*/SKILL.md,rules/**/*.md,rules/**/*.mdc, andCLAUDE.mdduring the Inventory phase. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the agent when reading these files.
- Capability inventory: The skill identifies as a meta-analysis tool and does not possess capabilities for command execution, network requests, or file writing.
- Sanitization: No sanitization or filtering of the ingested file content is mentioned prior to token estimation.
- [SAFE]: The skill's functionality is purely analytical and restricted to local file metadata and content counting. It does not exhibit patterns of data exfiltration, persistence, or privilege escalation.
Audit Metadata