Code Quality Analysis with PMAT
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executepmatcommands. These commands are used for code analysis tasks such as measuring cyclomatic complexity, detecting dead code, and identifying technical debt annotations. These operations are standard for a code quality analysis tool. - [EXTERNAL_DOWNLOADS]: No external downloads, package installations, or remote script executions (e.g.,
curl | bash) were identified. The skill assumes thepmatCLI tool is already available in the environment. - [PROMPT_INJECTION]: The instructions do not contain patterns attempting to override agent behavior, bypass safety guidelines, or extract system prompts.
- [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration or sensitive file access was found. The tool operates on local directory paths to perform analysis as requested by the user.
Audit Metadata