static-analysis

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides conceptual and code-level guidance for static analysis tasks such as pointer analysis, taint tracking, and dependency graphing using the LLVM framework.
  • [EXTERNAL_DOWNLOADS]: The skill references a external repository (gmh5225/awesome-llvm-security) to fetch curated lists of security tools and research. This is a well-known, community-maintained collection of information relevant to the skill's primary purpose. No execution of remote code is performed.
  • [COMMAND_EXECUTION]: Code snippets provided are for C++ development with the LLVM library and are intended for implementation within a static analysis tool, not for direct execution by the agent.
  • [INDIRECT_PROMPT_INJECTION]: While the skill discusses processing external code (static analysis), it does not define a runtime data ingestion surface that would allow for indirect prompt injection against the agent itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 07:21 PM