find-similar-functions
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands such as
trufflerandbun src/cli.tsto perform code symbol discovery within the target repository. - [EXTERNAL_DOWNLOADS]: The skill provides a fallback option to use
bunx @rayhanadev/truffler, which downloads and executes the package from the official npm registry, a well-known service. - [INDIRECT_PROMPT_INJECTION]: The skill ingests source code from the local filesystem to provide search results; while this is an indirect injection surface if the code contains malicious comments, the behavior is standard for development tools and mitigated by the agent's context and user oversight.
Audit Metadata