optimize
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to analyze code patterns and project structure. Evidence includes the use of
grepto find specific code patterns,catandjqto inspectpackage.json, andnpm run buildto generate bundle metrics.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes local source code, which could contain instructions designed to mislead the agent.\n - Ingestion points: Source files with
.ts,.js, and.sqlextensions read bygrepinSKILL.md.\n - Boundary markers: No explicit delimiters are used to separate the analyzed code from the agent's instructions.\n
- Capability inventory: File reading (
grep,cat), directory listing (ls), and script execution (npm run build).\n - Sanitization: Content read from files is not sanitized or escaped before processing.
Audit Metadata