stale-comments-audit
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard, well-known development tools such as
git ls-filesandrg(ripgrep) for file discovery, and invokes project-specific formatters, linters, and test runners for verification. These operations are scoped to the repository being audited and are consistent with the skill's primary function. - [PROMPT_INJECTION]: The skill processes source code comments, which constitutes a surface for indirect prompt injection.
- Ingestion points: JavaScript, JSX, TypeScript, TSX, and Go source files within the repository scope (defined in
SKILL.md). - Boundary markers: The instructions do not define specific delimiters for separating comment content from agent instructions, though it specifies identifying comments relative to implementation code.
- Capability inventory: The agent has capabilities to write to files and execute shell commands such as
test,build, andlint(SKILL.md). - Sanitization: No specific sanitization of comment text is mentioned prior to analysis.
- Mitigation: The skill follows the best practice of delegating batch analysis to read-only subagents when supported, which limits the potential impact of instructions embedded in audited comments.
Audit Metadata