promote
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands such as
git diff,ls, andmake eval-allto extract repository statistics and performance metrics. It also calls thecodesnapCLI tool to render images from text files. - [REMOTE_CODE_EXECUTION]: The skill instructions and reference materials require the agent to execute a Python script provided in
references/templates.mdto calculate the visual width of Unicode characters in generated tables, which constitutes dynamic execution of embedded code. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by processing data from project files while maintaining execution capabilities. 1. Ingestion points: Reads data from
CHANGELOG.mdandCLAUDE.md. 2. Boundary markers: No delimiters or isolation markers are defined for the ingested data. 3. Capability inventory: Access to shell execution (git,make,codesnap) and Python interpretation. 4. Sanitization: No sanitization or validation of the ingested content is performed before processing.
Audit Metadata