code-cartographer

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external source code files, which introduces a surface for indirect prompt injection if the files contain malicious instructions.
  • Ingestion points: The skill reads code content from local files via Grep and direct file-read operations as specified in Step 1 and Step 2 of SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the analyzed code comments or strings.
  • Capability inventory: The skill's primary capabilities are reading the file system (via Grep/Glob) and generating documentation; it does not utilize network-writing, file-writing, or elevated execution tools.
  • Sanitization: There is no requirement for sanitizing or escaping the source code content before the agent processes it for architectural mapping.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 12:21 AM