cpp-include-sorter

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill performs a specific, documented task using standard file I/O and regular expressions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided C/C++ source files. While this is an ingestion surface, the script's capabilities are strictly limited to reordering existing lines of text. It does not execute instructions found within the code or comments it parses.
  • Ingestion points: scripts/sort_includes.py reads file content using pathlib and open().read().
  • Boundary markers: None implemented for the file content being processed.
  • Capability inventory: Limited to reading and writing .cpp (or user-specified extension) files in a local directory. No network access or subprocess execution capabilities exist in the script.
  • Sanitization: Uses targeted regular expressions to extract #include paths, ignoring text in comments for path extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:24 AM