workflow-codebase-knowledge

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs a structured, read-only analysis of a codebase to generate documentation on architecture, modules, and API surfaces.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface as it reads content from external repository files. However, it implements strict 'Absolute Rules' that limit its capabilities to a read-only sweep and mandates the use of specific rendering templates, which effectively mitigates the risk of indirect prompt injection being used to perform unauthorized actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:01 AM