deep-explorer
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill features a surface for indirect prompt injection as it is designed to read and analyze untrusted content from the codebase being explored.
- Ingestion points: The skill ingests codebase data using the
ReadandGreptools as part of its sub-agent exploration tasks inSKILL.md. - Boundary markers: There are no explicit boundary markers or instructions to ignore potential commands embedded within the analyzed files.
- Capability inventory: The skill possesses capabilities including directory creation and file writing via
Bash(mkdir *)andWritetools, and command execution throughBash(git *),Bash(ls *),Bash(find *), andBash(jq *)as defined in the frontmatter andSKILL.md. - Sanitization: The instructions do not specify any content sanitization or validation for the data read from the repository files.
Audit Metadata