anti-vibecode
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bundled Node.js script (
scripts/scan.mjs) to perform automated audits of the user's project files. The script is dependency-free and operates by reading local files to match specific regex patterns defined in the skill's reference documentation. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing and modifying untrusted data (the user's source code), which creates a standard attack surface for indirect prompt injection.
- Ingestion points: Project source files (e.g., .tsx, .jsx, .html, .js) are read by the scanner and processed by the agent in "fix" mode.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the analyzed code.
- Capability inventory: The skill can execute a local script for scanning and has the capability to write or modify files on the file system.
- Sanitization: No sanitization or escaping is applied to the ingested code before it is processed by the AI agent.
Audit Metadata