strong-types
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a test script, scripts/test_skill.py, which executes other internal validation and scanning scripts via subprocess.run. These executions are limited to the skill's own local files and do not include any shell command injection vulnerabilities or execution of untrusted code.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review user-provided source code. While the ingestion of external code creates a theoretical attack surface, the risk is low as the analysis is conducted through static regular expressions and established agent-led review patterns, rather than executing the data as instructions.
- [EXTERNAL_DOWNLOADS]: The skill references various official documentation sites and well-known open-source tool repositories (e.g., PHP, TypeScript, Python, and Rust official manuals). These downloads are for informational purposes and do not involve the automated retrieval and execution of third-party scripts.
Audit Metadata