codebase-inspection
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'pygount' package from the standard Python Package Index (PyPI) to perform code analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local codebase files which could theoretically contain instructions designed to influence the agent's behavior when reviewing the analysis results.
- Ingestion points: Reads all files in the target directory (SKILL.md).
- Boundary markers: None specific to the tool output.
- Capability inventory: Executes 'pygount' via shell command.
- Sanitization: None; relies on the tool's summarization format to reduce injection risk.
Audit Metadata