cache-audit
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses bash commands
wc -candgit status --porcelainto calculate file sizes and repository state as part of its auditing metrics. - [PROMPT_INJECTION]: The skill processes content from various user-controlled files which creates a surface for indirect prompt injection.
- Ingestion points:
CLAUDE.md, rule files (global and project-level),MEMORY.md, and hook scripts are read into the agent context. - Boundary markers: The skill does not define specific boundary markers or use instructions to ignore embedded commands within the files it audits.
- Capability inventory: The skill possesses the capability to read local files and execute system commands (
wc,git). - Sanitization: No sanitization or validation is applied to the contents of the files being audited before they are processed by the agent.
Audit Metadata