reviewing-complexity

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a script located at ~/.claude/plugins/marketplaces/claude-configs/review/scripts/review-complexity.sh. This script is part of the platform's configuration and is used for automated complexity analysis.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run complex sequences of grep and wc commands for manual detection of code patterns like nesting depth and parameter counts.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted user-provided source code files.
  • Ingestion points: The skill reads user files using the Read and Grep tools to identify complexity metrics.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions embedded within the analyzed source code.
  • Capability inventory: The skill utilizes Bash and Read tools, which allow for script execution and file system interaction.
  • Sanitization: No sanitization or escaping of the ingested code content is performed before it is analyzed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 08:04 AM