honey-debt
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
grepto search the local filesystem for specific comment markers andgit blameto identify authors. These tools are used within their standard parameters for codebase analysis and reporting. - [PROMPT_INJECTION]: The skill processes untrusted data from source code comments which could theoretically contain malicious content designed to influence the agent. 1. Ingestion points: Local source code files parsed by
grep. 2. Boundary markers: The skill does not define delimiters to isolate the extracted comment content. 3. Capability inventory: The agent is limited to local read and metadata retrieval operations (grep,git blame). 4. Sanitization: No sanitization of the comment content is performed before it is formatted into the report.
Audit Metadata