refactoring
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the polyscan package from the public NPM registry at runtime.
- [REMOTE_CODE_EXECUTION]: Executes the downloaded polyscan package directly using npx.
- [COMMAND_EXECUTION]: Invokes shell commands to run analysis tools on user-specified directory paths.
- [INDIRECT_PROMPT_INJECTION]: Analyzes source code files which serve as an untrusted input surface where malicious comments could be used to influence the agent's behavior.
Audit Metadata