software-architecture-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes untrusted data from external repositories.
- Ingestion points: Target repository files cloned in SKILL.md.
- Boundary markers: No explicit markers or instructions to ignore embedded commands are present.
- Capability inventory: Uses shell tools (git, find, wc) and file-reading to analyze code in SKILL.md.
- Sanitization: No sanitization is performed on the ingested code content.
- [EXTERNAL_DOWNLOADS]: The skill clones source code from external repositories using Git (e.g., SKILL.md). This is performed via GitHub, which is a well-known service.
- [COMMAND_EXECUTION]: Utilizes standard shell commands (git, ls, find, wc) to map and analyze repository structure as described in SKILL.md.
Audit Metadata