cpp-include-sorter
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs a specific, documented task using standard file I/O and regular expressions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided C/C++ source files. While this is an ingestion surface, the script's capabilities are strictly limited to reordering existing lines of text. It does not execute instructions found within the code or comments it parses.
- Ingestion points:
scripts/sort_includes.pyreads file content usingpathlibandopen().read(). - Boundary markers: None implemented for the file content being processed.
- Capability inventory: Limited to reading and writing
.cpp(or user-specified extension) files in a local directory. No network access or subprocess execution capabilities exist in the script. - Sanitization: Uses targeted regular expressions to extract
#includepaths, ignoring text in comments for path extraction.
Audit Metadata