audit-trace
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes markdown files from the repository to perform traceability audits. While this is a surface for indirect instructions, it is fundamental to the skill's primary purpose and no malicious exploitation patterns were found.
- [COMMAND_EXECUTION]: Uses local 'grep', 'sed', and 'sort' commands to perform text processing. These operations are restricted to the documentation directories and do not represent arbitrary command execution.
Audit Metadata