full-repo-review
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
findto identify source files and executes a local Python utility at~/.claude/scripts/score-component.pyto perform deterministic health checks. This is standard behavior for repository analysis tools. - [PROMPT_INJECTION]: The skill analyzes arbitrary source code across the repository, creating an indirect prompt injection surface inherent to its function as a code reviewer.
- Ingestion points: Scans and reads files from
scripts/,hooks/,skills/,agents/, anddocs/directories (SKILL.md, Phase 1). - Boundary markers: None are explicitly defined in the orchestration logic; the skill relies on the downstream review engine for input handling.
- Capability inventory: The skill has
Bashfor local scanning andWriteto generate the final report file. - Sanitization: No sanitization is performed on file contents, as the tool is intended to analyze the original source code.
Audit Metadata