ln-020-codegraph
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill analyzes external codebase content, creating a surface for indirect prompt injection where instructions embedded in project files could attempt to influence agent behavior.
- Ingestion points: Project files are ingested during indexing via
index_projectand analyzed viagrep_searchandread_file. - Boundary markers: Absent; the instructions do not specify delimiters or directions to ignore instructions within analyzed files.
- Capability inventory: The skill leverages
Bash,Read,Grep, andGlobtools for analysis and fallback operations. - Sanitization: Absent; no validation or filtering of ingested code content is performed.
Audit Metadata