repomix
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of command-line operations for packing local directories and remote repositories using the
repomixCLI tool. - [EXTERNAL_DOWNLOADS]: Downloads and executes the
repomixpackage from the npm registry usingnpx. It also references a Docker image hosted on GitHub Container Registry (ghcr.io/yamadashy/repomix). - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external codebase content into an AI context, which presents an attack surface for indirect prompt injection if the source code contains malicious instructions.
- Ingestion points: Processes files from the local filesystem and remote Git repositories (e.g., via the
--remoteflag). - Boundary markers: Supports structured output formats such as XML, JSON, and Markdown to clearly delimit different files and metadata.
- Capability inventory: The packed output is used for AI-assisted analysis, refactoring, and documentation generation, rather than direct command execution.
- Sanitization: Includes a default security check feature (Secretlint) that identifies and blocks sensitive data like API keys and credentials from being included in the output.
Audit Metadata