dotnet-cloc
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing various command-line tools including
cloc,git, andjq. It also includes bootstrap commands for system-level installation usingsudowith standard package managers likeapt,yum, anddnf.- [EXTERNAL_DOWNLOADS]: Mentions downloading thecloctool from trusted and well-known sources such as the official NPM registry, Homebrew, Chocolatey, Scoop, and thealdanial/clocDocker image.- [PROMPT_INJECTION]: The skill processes repository files which presents a surface for indirect prompt injection. - Ingestion points:
clocreads filenames and file contents from the local repository during execution. - Boundary markers: No explicit delimiters are specified to separate the tool output from other agent instructions.
- Capability inventory: File system access, network access via
git, and command execution for package management. - Sanitization: The skill assumes files are standard source code and does not prescribe sanitization of content before processing.
Audit Metadata