generate-snapshot

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Local Command Execution: The skill executes a Python module (python -m analysis.snapshot) to perform its analysis. This is a standard pattern for technical skills that rely on local scripts or binaries to process data and generate reports within the user's environment.
  • Data Ingestion Surface: The skill analyzes repository files and git history to identify code complexity and technical debt markers. This represents an indirect prompt injection surface as it processes external, potentially untrusted data.
  • Ingestion points: The skill reads files throughout the repository and parses git history as described in SKILL.md.
  • Boundary markers: No specific delimiters or "ignore instructions" prompts are defined in the instruction file to separate code content from analysis instructions.
  • Capability inventory: The skill uses shell commands via Python to perform analysis and writes the results to a local file (analysis-snapshot.json).
  • Sanitization: The instructions do not specify any sanitization or filtering of the source code content before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 03:23 PM