odoo-code-tracer
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes Odoo source code files, which serves as an entry point for external, potentially untrusted data during the tracing process.
- Ingestion points: Ingests Python, XML, and JavaScript source files from Odoo modules and the framework core.
- Boundary markers: The skill does not implement specific delimiters to isolate external code content, relying instead on explicit file/line referencing.
- Capability inventory: The skill is designed to read and analyze local source code. It includes instructions to avoid running commands that touch databases or services without explicit user confirmation.
- Sanitization: No explicit sanitization or filtering of the ingested source code is performed before analysis.
Audit Metadata