repomix

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous examples of command-line operations for packing local directories and remote repositories using the repomix CLI tool.
  • [EXTERNAL_DOWNLOADS]: Downloads and executes the repomix package from the npm registry using npx. It also references a Docker image hosted on GitHub Container Registry (ghcr.io/yamadashy/repomix).
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external codebase content into an AI context, which presents an attack surface for indirect prompt injection if the source code contains malicious instructions.
  • Ingestion points: Processes files from the local filesystem and remote Git repositories (e.g., via the --remote flag).
  • Boundary markers: Supports structured output formats such as XML, JSON, and Markdown to clearly delimit different files and metadata.
  • Capability inventory: The packed output is used for AI-assisted analysis, refactoring, and documentation generation, rather than direct command execution.
  • Sanitization: Includes a default security check feature (Secretlint) that identifies and blocks sensitive data like API keys and credentials from being included in the output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:11 PM