deep-trace
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an internal script
scripts/copy-to-clipboard.shthat detects and executes host-level clipboard tools (e.g., pbcopy, wl-copy, xclip, clip.exe). - [EXTERNAL_DOWNLOADS]: The documentation references an external GitHub repository (laststance/deep-trace-extension) belonging to the identified vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze user-provided code and diffs, which acts as a potential surface for instructions embedded within the analyzed data. It does not provide explicit sanitization mechanisms for this input.
Audit Metadata