analyze-repo
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructions (SKILL.md Phase 1.2) explicitly direct the agent to scan for and read sensitive files such as .env, secrets/, credentials, .pem, and .key files within the repository being analyzed. While the stated goal is a security audit to identify leaks, this capability provides a mechanism for exposing sensitive credentials found within the project scope.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local directories or remote GitHub repositories during its analysis phases. It lacks explicit delimiters or instructions to prevent malicious code comments, documentation, or metadata within the target repository from overriding the agent's instructions.
- Ingestion points: File content from local paths or remote GitHub URLs (SKILL.md Phase 1.1/1.2).
- Boundary markers: Absent; the skill does not mandate the use of delimiters or 'ignore' instructions for external content.
- Capability inventory: Extensive file system read access, directory traversal, and the ability to generate detailed Markdown reports.
- Sanitization: No sanitization or filtering of the ingested code content is specified before it is processed by the agent.
Audit Metadata