codebase-overview
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to scan and analyze codebase files (such as configuration files, READMEs, and models) which are untrusted external data. This creates a surface for indirect prompt injection, where an attacker could place malicious instructions inside the codebase to manipulate the AI agent's analysis or subsequent actions. There are no explicit boundary markers or sanitization steps mentioned in the skill instructions to mitigate this risk.
Audit Metadata