gitguardex
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell script located at
scripts/codex-agent.shwith variable arguments<task>and<agent>. This execution pattern is susceptible to command injection if the inputs are sourced from untrusted data within the repository context, such as branch names, PR descriptions, or commit messages. - Ingestion points: The
<task>and<agent>parameters in the bash command located in SKILL.md. - Boundary markers: No delimiters or quoting mechanisms are specified to prevent shell metacharacter injection.
- Capability inventory: The skill utilizes shell execution via the
bashinterpreter as documented in SKILL.md. - Sanitization: There is no evidence of input validation, escaping, or sanitization provided in the instructions.
Audit Metadata