src-tree-reorganize
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
cmake --buildin the system shell to verify project status after batch moves of source files. - [PROMPT_INJECTION]: The skill processes untrusted project files, creating a surface for indirect prompt injection.
- Ingestion points: Reads content from
*.c,*.h, andCMakeLists.txtfiles under the repository root using glob and grep. - Boundary markers: Does not specify delimiters or instructions to ignore embedded prompts within the source files.
- Capability inventory: Possesses the ability to perform string replacements in files and execute shell commands.
- Sanitization: No sanitization or validation mechanisms are defined for the data read from project files before interpolation or processing.
Audit Metadata