feature-discovery
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common CLI utilities like
rg,find,git, andghto perform discovery and trace features across projects. These tools are used in a read-only manner consistent with auditing and information-gathering tasks. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted data from repository source code and GitHub issue comments. However, the risk is mitigated by the skill's explicit 'read-only' rules and prohibitions against destructive commands or code execution.
- Ingestion points: Codebase files, documentation, and GitHub issue content retrieved via the
ghtool. - Boundary markers: None explicitly defined.
- Capability inventory: Limited to read-only CLI search and discovery tools.
- Sanitization: No specific data validation or escaping processes are described.
- [SAFE]: The skill is strictly limited to non-destructive analysis and includes specific rules forbidding file edits, package installations, or destructive git operations like
fetchorpullduring the discovery process.
Audit Metadata