detect-static-dependencies
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system-level search tools like
rg(ripgrep) andgrepto perform recursive content searches across the workspace. This behavior is the core functional requirement of the skill for locating C# code patterns. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from the workspace in the form of C# source files and project metadata.
- Ingestion points: Files with extensions
.cs,.csproj, and.slnwithin the user-provided workspace. - Boundary markers: The skill does not explicitly define delimiters to isolate code content from potential instructions embedded in comments or strings.
- Capability inventory: The skill is limited to file listing and read-only operations; it does not request or utilize network access or file-write capabilities.
- Sanitization: No specific content sanitization is implemented, though the risk is mitigated by the read-only reporting nature of the skill.
Audit Metadata