cangjie

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a well-structured resource for supporting development in the Cangjie programming language.
  • Frontmatter Analysis: The SKILL.md configuration correctly scopes the agent's behavior, focusing on code generation and project analysis. It allows necessary tools like WebSearch, WebFetch, and Bash for searching official documentation and local files.
  • Dependency and Script Review: The provided Python scripts (e.g., aggregate_benchmark.py, search_cangjie_sources.py) are utility tools for performance measurement and documentation search. Static analysis identified subprocess.run() calls, which are used appropriately to invoke ripgrep (rg) for local file indexing.
  • Documentation Review: Documentation files in the references/ directory contain standard installation and usage guides. For example, the HLE_manual.md mentions the installation of nvm via a standard curl | bash command from a well-known GitHub repository (nvm-sh). This is provided for user reference and does not represent a silent or malicious execution pattern.
  • Prompt Injection Check: No instructions were found that attempt to override the agent's safety protocols or system prompts.
  • Data Privacy Check: The evaluation cases in evals/evals.json reference a specific local directory path (/Users/louloulin/...). This appears to be the author's development path used for benchmarking and does not instruct the agent to access unauthorized user data.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 01:46 AM
Security Audit — agent-trust-hub — cangjie