data-flows
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of markdown documentation and instructions for the AI agent. There are no executable scripts or binaries included, which eliminates the risk of direct malicious code execution from the skill itself.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external codebase data, which is an untrusted source. While this represents a surface for indirect prompt injection (where code being audited might contain instructions for the auditor), the skill provides a standard analytical framework and does not instruct the agent to execute or evaluate the code it is tracing.
Audit Metadata