laundering
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to integrate code and perform quality checks.
- Commands include
git mergefor branch integration,grepfor internal identifier scanning,wcfor code length auditing, andrmfor removing temporary operational artifacts. - The skill also invokes project-defined commands for testing, linting, and coverage reporting (e.g.,
npm run test,pytest, etc.). - [REMOTE_CODE_EXECUTION]: The skill utilizes
npx jscpdto perform a code duplication audit. - This command fetches and executes the
jscpdpackage from the official npm registry, which is a well-known service for software development tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes modified project source files for quality checks.
- Ingestion points: The skill reads modified source files (e.g.,
.ts,.py,.go) using tools likegrep,wc, andjscpd. - Capability inventory: The skill has capabilities for file reading, shell command execution, and file deletion (
rm). - Boundary markers: Standard analysis tools are used; explicit LLM boundary markers are not applied to the file analysis output.
- Sanitization: Not applicable as the skill performs static analysis of local source code.
Audit Metadata