code-reader-v2-cn
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is entirely comprised of markdown instructions and templates for an AI agent. It contains no executable scripts, binaries, or active code components.
- [EXTERNAL_DOWNLOADS]: The instructions link to reputable academic research papers and educational resources (aft.org, wiley.com, science.org, refactoring.guru) to provide theoretical support for the code analysis process.
- [SAFE]: No malicious patterns such as prompt injection, unauthorized data access, exfiltration, or persistence mechanisms were detected in the instruction files or the referenced zip archive.
- [PROMPT_INJECTION]: The skill describes a framework for reading and analyzing external source code, which identifies an indirect prompt injection surface.
- Ingestion points: Project source files read via file-reading tools.
- Boundary markers: None specified in the instructions to delimit external content.
- Capability inventory: Uses file-reading tools to process content.
- Sanitization: No explicit sanitization or filtering of input code for embedded instructions is defined. This is considered safe as it is the core functionality of a code-reading assistant.
Audit Metadata