refactoring
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'pyscn' package from PyPI at runtime using the 'uvx' command. PyPI is a well-known package registry.
- [REMOTE_CODE_EXECUTION]: The skill executes the downloaded 'pyscn' package via 'uvx'. This is the standard method for running temporary Python CLI utilities.
- [COMMAND_EXECUTION]: The skill provides the agent with commands to execute shell-based analysis tools on a codebase.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it reads and analyzes external source code. 1. Ingestion points: The parameter allows the agent to read arbitrary code files. 2. Boundary markers: No delimiters or ignore instructions are used when reading files. 3. Capability inventory: The agent can execute CLI analysis tools and read their output. 4. Sanitization: None performed on the analyzed content.
Audit Metadata