cangjie
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-structured resource for supporting development in the Cangjie programming language.
- Frontmatter Analysis: The
SKILL.mdconfiguration correctly scopes the agent's behavior, focusing on code generation and project analysis. It allows necessary tools likeWebSearch,WebFetch, andBashfor searching official documentation and local files. - Dependency and Script Review: The provided Python scripts (e.g.,
aggregate_benchmark.py,search_cangjie_sources.py) are utility tools for performance measurement and documentation search. Static analysis identifiedsubprocess.run()calls, which are used appropriately to invokeripgrep(rg) for local file indexing. - Documentation Review: Documentation files in the
references/directory contain standard installation and usage guides. For example, theHLE_manual.mdmentions the installation ofnvmvia a standardcurl | bashcommand from a well-known GitHub repository (nvm-sh). This is provided for user reference and does not represent a silent or malicious execution pattern. - Prompt Injection Check: No instructions were found that attempt to override the agent's safety protocols or system prompts.
- Data Privacy Check: The evaluation cases in
evals/evals.jsonreference a specific local directory path (/Users/louloulin/...). This appears to be the author's development path used for benchmarking and does not instruct the agent to access unauthorized user data.
Audit Metadata