clang
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for tools like
clang-tidyandclang --analyzeto process source code. Malicious instructions embedded in source code could potentially appear in the output and influence agent behavior, which is a standard property of code analysis tools. - Ingestion points: Source code files processed by compiler and analysis tools in
SKILL.mdandreferences/clang-tidy.md. - Boundary markers: Not specified in tool output instructions.
- Capability inventory: Shell execution of compiler binaries and analysis tools.
- Sanitization: None specified; relies on standard tool behavior.
- [DYNAMIC_EXECUTION]: The Profile-Guided Optimization (PGO) workflow described in
SKILL.mdincludes a step to execute an instrumented binary (./prog_inst) generated during the build process. This is a standard and necessary part of the PGO process for performance tuning.
Audit Metadata