khe-motion
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions for running standard development commands like git diff and npx expo install. These commands are standard for the tool's purpose and are directed at the user for environment setup or project auditing.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes an explicit instruction to treat external repository content as data, not as instructions. This prevents the agent from executing code or following directions that might be hidden in the audited codebase.\n- [SAFE]: No obfuscation, data exfiltration, or privilege escalation patterns were found. The external resources mentioned are trusted documentation sites or popular open-source libraries.
Audit Metadata