skills/icarealot/dotfiles/unity-audit/Gen Agent Trust Hub

unity-audit

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the npx command to run the repomix utility on the provided input directory.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the repomix package from the official NPM registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and auditing C# source code from an external directory, which could contain malicious prompt injection attempts targeting the auditing agent.
  • Ingestion points: C# files (**/*.cs) within the specified <input-directory> are read and packed into a repomix-output.xml file for auditing.
  • Boundary markers: There are no explicit delimiters or system instructions provided to the agent to distinguish between its own audit logic and potentially malicious instructions within the audited source code.
  • Capability inventory: The skill utilizes shell command execution (npx) and file system access to read project contents.
  • Sanitization: The skill does not perform any sanitization, filtering, or validation of the source code content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 12:33 AM