context-engineering
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The testing file
scripts/tests/test_edge_cases.pyusessubprocess.runto execute the skill's utility scripts (context_analyzer.pyandcompression_evaluator.py) as part of its automated validation suite. This is a standard practice for functional testing of CLI tools. - [DATA_EXPOSURE]: The reference document
references/runtime-awareness.mdmentions configuration file paths such as~/.claude/.credentials.jsonand%USERPROFILE%\.claude\.credentials.json. These are documented as part of an explanation on how the host platform (Claude Code) manages authentication and usage monitoring. The provided Python scripts do not attempt to access or exfiltrate these files. - [PROMPT_INJECTION]: The skill features scripts that process potentially untrusted external data (JSON-formatted conversation histories).
- Ingestion points:
scripts/context_analyzer.py(viaload_json_file) andscripts/compression_evaluator.py(viaload_file). - Boundary markers: Not explicitly defined in scripts.
- Capability inventory: File read/write via scripts; subprocess execution in tests.
- Sanitization: Standard JSON parsing is used, with a 100MB file size limit implemented to prevent resource exhaustion.
Audit Metadata