codebase-audit
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions provide a robust security-oriented methodology for auditing code, such as the 'Prime Directive' to treat logic as the only source of truth and the 'PHASE 4' instruction to ignore comments and docstrings during bug hunts, which effectively mitigates risks associated with indirect prompt injection in source code.
- [SAFE]: The included evaluation script (
evals/scripts/grade.py) is a benign utility that performs simple substring matching. It does not use unsafe functions, download remote content, or perform dynamic code execution. - [SAFE]: No evidence of data exfiltration, hardcoded credentials, or unauthorized network communication was found. The skill operates on local file paths provided by the user and writes its findings to local report files.
- [SAFE]: The skill does not use obfuscation techniques; all instructions and scripts are provided in clear text with no hidden characters or encoded payloads.
Audit Metadata