cs-learn
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local script
python codestable/tools/search-yaml.pyto search and filter documentation based on YAML frontmatter. This execution is scoped to internal project directories and is used for duplicate detection and document retrieval. - [PROMPT_INJECTION]: The skill processes existing documentation during update workflows (Phase 1.5). This represents a surface for indirect prompt injection if those documents were to contain malicious instructions; however, the impact is limited to the generation of new documentation within the same restricted directory.
- [SAFE]: No data exfiltration, remote code execution, or credential exposure patterns were identified. The skill's operations are confined to the local
codestable/compound/directory and follow established project conventions.
Audit Metadata