legacy-codebase-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches prebuilt native binaries and release manifests from the vendor's repository.\n
- Evidence:
scripts/setup_native.pydownloads archives fromgithub.com/EdukeyTeam/agent-toolbox/releases.\n - Evidence:
scripts/context7_backend.pydownloads model weights from Hugging Face for semantic search.\n- [REMOTE_CODE_EXECUTION]: Automates the download and execution of native binaries with built-in integrity verification.\n - Evidence:
scripts/setup_native.pyverifies SHA-256 hashes of downloaded ZIP and tar.gz archives and individual member files against a signed release manifest.\n - Evidence: The script performs a smoke test by executing the binary with a fixture repository after installation.\n- [COMMAND_EXECUTION]: Executes system utilities and local helpers to perform codebase analysis.\n
- Evidence:
scripts/repo_files.pyexecutesgitcommands to inventory files and check ignore status.\n - Evidence:
scripts/context7_backend.pyspawnsnodeto run JavaScript helpers for inference tasks.\n- [DYNAMIC_EXECUTION]: Implements dynamic loading for internal scripts and external libraries.\n - Evidence:
scripts/legacy_tools.pyusesimportlib.import_moduleto load command handlers.\n - Evidence:
scripts/retrieval/embed.mjsusesimport()to load the@huggingface/transformerspackage from a user-defined runtime path.\n- [INDIRECT_PROMPT_INJECTION]: Processes untrusted repository content through a retrieval system.\n - Ingestion:
scripts/context7_backend.pyreads code and documentation from local repositories.\n - Boundary Markers: Retrieval payloads are structured in JSON with provenance metadata (
kind,path,revision,sha256).\n - Capability Inventory: The skill has file-write (SQLite index), network-read (model downloads), and subprocess-execution capabilities.\n
- Sanitization:
scripts/repo_render.pysanitizes non-printable characters in rendered snippets to prevent terminal or display confusion.
Audit Metadata