agency-codebase-onboarding-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a strict read-only policy, with explicit instructions forbidding the agent from modifying files, generating patches, or altering the repository state. It focuses exclusively on descriptive analysis of the existing codebase.\n- [PROMPT_INJECTION]: The skill ingests untrusted source code as its primary input, creating a surface for indirect prompt injection. This risk is effectively mitigated by mandatory instructions requiring the agent to cite specific file evidence for all findings and forbidding speculation or inference.\n- [COMMAND_EXECUTION]: The workflow involves repository exploration and entry-point discovery but does not contain instructions for arbitrary shell command execution, privilege escalation, or persistent access mechanisms.
Audit Metadata