codeprobe-code-smells

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to perform line counts and functional pattern matching across the project's source code files as part of its analysis logic.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted source code and configuration files (.codeprobe-config.json), creating an attack surface where malicious data could influence agent behavior.
  • Ingestion points: Project source code files accessed via Read, Grep, and Glob tools.
  • Boundary markers: The instructions do not define the use of delimiters or explicit instructions for the agent to ignore potentially malicious content embedded within the files being scanned.
  • Capability inventory: The skill has access to Read, Grep, Glob, and Bash tools, providing a pathway for logic execution based on ingested data.
  • Sanitization: There is no evidence of content sanitization or validation of the scanned file contents before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:19 PM