orienting-codebases
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches repository archives from GitHub's official API (api.github.com) to provide data for the orientation exercises.
- [COMMAND_EXECUTION]: Employs shell commands to set up a virtual environment, install necessary parsing libraries, and execute local analysis scripts for structural scanning and feature gathering. It also uses standard tools like
tarfor archive extraction andcurlfor fetching data. - [INDIRECT_PROMPT_INJECTION]: The skill processes external source code which acts as a potential ingestion point for untrusted data.
- Ingestion points: Source code files from external repositories downloaded for analysis as specified in SKILL.md.
- Boundary markers: Extracted source code is presented within HTML code blocks in the generated artifacts.
- Capability inventory: Includes file system writing for artifacts, shell command execution for analysis, and network access for repository fetching.
- Sanitization: Instructions mandate that source code be properly escaped when presented in the HTML output.
Audit Metadata