qstack-blast-radius
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided source code, diffs, and branch data to trace risks. It mitigates potential ingestion risks by mandating that the agent removes private data before sharing evidence and requires authorization for any follow-up execution.
- [DYNAMIC_EXECUTION]: The skill's verification process includes a ladder of proof that may involve executing existing tests or scripts. This capability is strictly governed by instructions that require prior write authorization for file creation or code execution.
- [EXTERNAL_DOWNLOADS]: The skill includes a reference to an official GitHub repository from a well-known developer tool for licensing and attribution purposes, which is a standard and safe practice.
Audit Metadata