code-quality-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebases, which inherently introduces a surface for indirect prompt injection where instructions embedded in analyzed files could attempt to influence the agent's behavior.
- Ingestion points: Project source code is read using the
Read,Grep, andGlobtools as defined in theallowed-toolssection ofSKILL.md. - Boundary markers: The instructions do not define specific delimiters or adversarial-intent warnings to distinguish analyzed code from agent instructions.
- Capability inventory: The skill has permissions to modify files via
WriteandEdit, manage tasks withTaskCreate, and communicate viaSendMessageandTeammate. - Sanitization: There is no explicit requirement for the agent to sanitize or filter the content of read files before processing them for quality metrics.
Audit Metadata