code-mapper
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of high-level instructions for code analysis and lacks any executable scripts, binaries, or command-line operations. There are no signs of credential harvesting, persistence mechanisms, or unauthorized privilege escalation.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted source code to map entry points and execution flow. This creates a surface for indirect prompt injection if the analyzed code contains malicious instructions intended to influence the agent's behavior.\n
- Ingestion points: External source code files (SKILL.md)\n
- Boundary markers: None specified in the instructions\n
- Capability inventory: No file-write, network operations, or subprocess capabilities identified; metadata enforces a read-only sandbox mode\n
- Sanitization: No explicit sanitization or validation of the analyzed code content is defined
Audit Metadata