tree-sitting
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The engine in
scripts/engine.pyuses thectypesmodule to dynamically load bundled shared libraries (.sofiles) from theparsers/directory. This is used to interface with the tree-sitter parsing logic and is restricted to the local filesystem. Additionally, the test suite intests/test_cli_cache.pyusessubprocess.runto execute the skill's own CLI for verification. - [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it reads and extracts content from arbitrary source files in a repository.
- Ingestion points:
scripts/engine.pyreads file content from the local filesystem during scans and source retrieval. - Boundary markers: Absent. Extracted code and docstrings are returned directly to the agent context without explicit delimiters.
- Capability inventory: Local file system read access and the ability to load local shared libraries.
- Sanitization: None. The skill returns raw text extracted from the analyzed files.
- [SAFE]: The skill implements a local caching mechanism that stores analysis results in a temporary directory or a user-defined path. This is used solely for performance optimization and includes security-conscious implementations such as atomic file writes and fingerprint validation.
Audit Metadata