include-what-you-use

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard C++ development and analysis tools, including iwyu, iwyu_tool.py, cmake, and grep. These commands are used for static analysis, build configuration, and checking file contents within a development context.- [EXTERNAL_DOWNLOADS]: Instructions include installing the IWYU tool through official and well-known package registries such as apt-get for Debian/Ubuntu and Homebrew for macOS. These are recognized as trusted sources for system utilities.- [INDIRECT_PROMPT_INJECTION]: The workflow involves generating a tool report (iwyu.log) and piping it into a fix script (fix_include) to automate header modifications.
  • Ingestion points: The tool report iwyu.log is processed by the fix_include script.
  • Boundary markers: None identified between tool output and the modification script.
  • Capability inventory: The skill uses fix_include to modify local source code files and cmake for build execution.
  • Sanitization: Standard tool behavior for IWYU refactoring, which relies on the accuracy of the C++ parser. This represents a standard automated refactoring surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:52 AM