click-path-audit
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a logical workflow for behavioral flow auditing and does not include any executable code, remote resource fetching, or credential handling.
- [PROMPT_INJECTION]: The instructions are clearly defined for debugging purposes and do not attempt to override the underlying AI agent's safety constraints or system prompts.
- [DATA_EXFILTRATION]: No network activity or sensitive data access patterns were detected. The scope is limited to analyzing project source code.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external source code (an untrusted data source), it follows standard code analysis patterns. The agent identifies state interactions within the provided code context without executing or rendering untrusted content in a way that would lead to injection.
Audit Metadata