codeprobe-code-smells
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform line counts and functional pattern matching across the project's source code files as part of its analysis logic. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted source code and configuration files (
.codeprobe-config.json), creating an attack surface where malicious data could influence agent behavior. - Ingestion points: Project source code files accessed via
Read,Grep, andGlobtools. - Boundary markers: The instructions do not define the use of delimiters or explicit instructions for the agent to ignore potentially malicious content embedded within the files being scanned.
- Capability inventory: The skill has access to
Read,Grep,Glob, andBashtools, providing a pathway for logic execution based on ingested data. - Sanitization: There is no evidence of content sanitization or validation of the scanned file contents before they are processed by the agent.
Audit Metadata