codebase-inspection

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the pygount package from the official Python Package Index (PyPI). This is a standard and expected dependency for the skill's primary function of codebase analysis.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands such as cd, pygount, sort, and head to perform its tasks. These commands are used within the context of the repository being analyzed and do not exhibit signs of privilege escalation or malicious intent.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external files (source code) within a repository. While this represents a theoretical attack surface where malicious content in comments could attempt to influence the agent, the tool's output is restricted to line counts and language statistics, which significantly mitigates this risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 05:58 AM