repo-map
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured instructions for repository documentation and navigation mapping. It focuses on indexing existing code rather than introducing new logic or external dependencies.
- [COMMAND_EXECUTION]: The skill instructs the agent to run
git status --shortto verify the state of the repository before making documentation edits. This is a standard and safe operation within a developer's workspace for the intended purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to read and process project files to generate a map, it naturally has an ingestion surface for untrusted data (the contents of the files being mapped). However, the skill instructions focus on generating static documentation (README.md) and include specific checks to ensure the source of truth remains the repository evidence, which is a standard operational risk for repository-mapping tools.
Audit Metadata