cs-build-resync-codebase
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill analyzes untrusted data from the local codebase and git logs, creating an indirect prompt injection surface where instructions hidden in code or commit messages could influence the agent. 1. Ingestion points: Local codebase files, git logs, and git diffs (Steps 1 and 2). 2. Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when reading data. 3. Capability inventory: Uses Bash to execute git, node, and codespring CLI tools. 4. Sanitization: No validation or escaping of the ingested code content is specified.
- [DATA_EXFILTRATION]: The skill reads project metadata, file content, and git history to send updates to the vendor's CodeSpring platform. This activity is restricted to the vendor's own infrastructure and aligns with the stated purpose of the skill.
- [COMMAND_EXECUTION]: Executes git commands and vendor-provided CLI tools to perform codebase analysis and documentation updates.
Audit Metadata