skills/kucherenko/gangsta/laundering/Gen Agent Trust Hub

laundering

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands to integrate code and perform quality checks.
  • Commands include git merge for branch integration, grep for internal identifier scanning, wc for code length auditing, and rm for removing temporary operational artifacts.
  • The skill also invokes project-defined commands for testing, linting, and coverage reporting (e.g., npm run test, pytest, etc.).
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx jscpd to perform a code duplication audit.
  • This command fetches and executes the jscpd package from the official npm registry, which is a well-known service for software development tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes modified project source files for quality checks.
  • Ingestion points: The skill reads modified source files (e.g., .ts, .py, .go) using tools like grep, wc, and jscpd.
  • Capability inventory: The skill has capabilities for file reading, shell command execution, and file deletion (rm).
  • Boundary markers: Standard analysis tools are used; explicit LLM boundary markers are not applied to the file analysis output.
  • Sanitization: Not applicable as the skill performs static analysis of local source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 07:46 AM