establish-project
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill includes a dedicated section in brownfield-scan.md instructing the agent to ignore any commands or instructions found within scanned repository files, treating them strictly as data.
- [DATA_EXFILTRATION]: Implements an automated redaction pass that filters credentials, tokens, and private keys from scanned content. The static analysis flag for a connection string is a false positive based on a documentation example showing how to redact such strings.
- [COMMAND_EXECUTION]: Uses standard, local system utilities like git and find for file enumeration. These operations are restricted to the local repository and do not involve elevated privileges or unsafe string interpolation.
- [EXTERNAL_DOWNLOADS]: Does not fetch or execute any remote scripts or third-party dependencies, operating entirely with pre-installed system tools.
Audit Metadata