check
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local commands using
uv runanduvx, including custom CI scripts (scripts/ci/*.py),ruff,pyright, andpytest. These are standard development workflows for linting and testing. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests and processes source code and documentation from the repository.
- Ingestion points: Processes all files in
src,tests,docs, andwebsite/docs/through various tools (ruff, pyright, pytest, grep) inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands in the processed data are present in
SKILL.md. - Capability inventory: Can execute arbitrary local scripts via
uv run, perform repository-wide searches viagrep, and modify files viaruff --fixas defined inSKILL.md. - Sanitization: No explicit sanitization or validation of the content being processed by the underlying tools is documented in the skill.
Audit Metadata