code-cartographer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external source code files, which introduces a surface for indirect prompt injection if the files contain malicious instructions.
- Ingestion points: The skill reads code content from local files via
Grepand direct file-read operations as specified in Step 1 and Step 2 ofSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the analyzed code comments or strings.
- Capability inventory: The skill's primary capabilities are reading the file system (via
Grep/Glob) and generating documentation; it does not utilize network-writing, file-writing, or elevated execution tools. - Sanitization: There is no requirement for sanitizing or escaping the source code content before the agent processes it for architectural mapping.
Audit Metadata