clang

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for tools like clang-tidy and clang --analyze to process source code. Malicious instructions embedded in source code could potentially appear in the output and influence agent behavior, which is a standard property of code analysis tools.
  • Ingestion points: Source code files processed by compiler and analysis tools in SKILL.md and references/clang-tidy.md.
  • Boundary markers: Not specified in tool output instructions.
  • Capability inventory: Shell execution of compiler binaries and analysis tools.
  • Sanitization: None specified; relies on standard tool behavior.
  • [DYNAMIC_EXECUTION]: The Profile-Guided Optimization (PGO) workflow described in SKILL.md includes a step to execute an instrumented binary (./prog_inst) generated during the build process. This is a standard and necessary part of the PGO process for performance tuning.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:50 AM