cpp-pro
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify external C++ source code, which creates a potential surface for indirect instructions to influence the agent.
- Ingestion points: C++ source files, build configurations, and project metadata (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or 'ignore' rules for content found within code comments or string literals in analyzed files.
- Capability inventory: The skill operates with 'workspace-write' permissions, allowing it to modify the local file system and source code based on its analysis.
- Sanitization: There is no explicit logic described to sanitize or escape potentially malicious instructions embedded in the source code it processes.
Audit Metadata