chrome-drawn-outside-the-theme-scope
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands using
grepto audit local Kotlin source files for specific theme-related patterns. These commands are benign, intended for development auditing, and do not involve remote execution or sensitive data access. - [INDIRECT_PROMPT_INJECTION]: While the skill involves searching through project source code, it lacks the attack surface for instruction injection.
- Ingestion points: Local
.ktfiles are scanned bygrepcommands. - Boundary markers: Not applicable as it is a manual auditing process.
- Capability inventory: Restricted to local
grepoperations. - Sanitization: Not applicable for static code search patterns.
Audit Metadata