m-scan
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard utility for analyzing local project files (CSS, HTML, JSX) to identify design patterns. Its operations are restricted to the local file system and do not involve network requests or remote code execution.
- [PROMPT_INJECTION]: The skill processes content from the codebase, which represents an indirect prompt injection surface. 1. Ingestion points: CSS, HTML, and JSX files. 2. Boundary markers: Not specified. 3. Capability inventory: Local file reading and writing. 4. Sanitization: None mentioned. This surface is characteristic of automated analysis tools and is not considered a malicious finding.
Audit Metadata