chrome-drawn-outside-the-theme-scope

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell commands using grep to audit local Kotlin source files for specific theme-related patterns. These commands are benign, intended for development auditing, and do not involve remote execution or sensitive data access.
  • [INDIRECT_PROMPT_INJECTION]: While the skill involves searching through project source code, it lacks the attack surface for instruction injection.
  • Ingestion points: Local .kt files are scanned by grep commands.
  • Boundary markers: Not applicable as it is a manual auditing process.
  • Capability inventory: Restricted to local grep operations.
  • Sanitization: Not applicable for static code search patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 07:02 AM
Security Audit — agent-trust-hub — chrome-drawn-outside-the-theme-scope