gitnexus-guide
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to run a local script,
node .gitnexus/run.cjs analyze, to perform repository analysis and update the knowledge graph (SKILL.md). - [COMMAND_EXECUTION]: The documentation describes the
renametool, which is capable of performing coordinated, multi-file modifications across the codebase (SKILL.md). - [PROMPT_INJECTION]: The skill interacts with external codebase data through various intelligence tools, creating an indirect prompt injection surface.
- Ingestion points: Codebase symbols, execution flows, and file content are ingested into the GitNexus knowledge graph for use with tools like
queryandexplain(SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters to isolate ingested code content from agent instructions.
- Capability inventory: The skill allows for file writes (via the
renametool) and subprocess execution (via theanalyzecommand) (SKILL.md). - Sanitization: The skill documentation does not describe any sanitization or validation of the ingested code data.
Audit Metadata