static-analysis-sweep
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard security analysis commands including
semgrep,gitleaks,npm audit,pip-audit, andcodeqlagainst the local repository and git history. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from source code files and security scanner outputs during the triage phase.
- Ingestion points: Scanner outputs from Semgrep, Gitleaks, npm audit, pip-audit, and CodeQL results (SKILL.md).
- Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded within the code findings or scanner outputs it triages.
- Capability inventory: Bash, Read, Write, Edit, Glob, Grep (SKILL.md).
- Sanitization: Absent; the agent evaluates raw output to determine vulnerability reachability and provides remediation guidance.
Audit Metadata