code-explainer
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from external repositories (e.g., source code, READMEs, tests). This presents a surface for indirect prompt injection where an attacker could place malicious instructions in a repo to influence the agent's behavior.
- Ingestion points: The skill instructs the agent to open and read project entry points (e.g., main.go, cmd/), README files, and test files.
- Boundary markers: No specific delimiters or instructions to ignore potential prompts within the codebase are provided to the agent.
- Capability inventory: The primary capability involved is file reading and content analysis across the local file system.
- Sanitization: There are no instructions for sanitizing, escaping, or validating the content read from the repository files before processing.
Audit Metadata