analyze-codebase-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's primary function is to scan and analyze external codebases, which is a surface for indirect prompt injection if those files contain malicious instructions meant to subvert the agent's analysis logic. \n
- Ingestion points: Codebase files located in paths provided to the
put_auto()andput_generate()functions as seen in SKILL.md. \n - Boundary markers: Not specified in the instruction set for separating codebase content from agent directives. \n
- Capability inventory: The skill is permitted to use
Bash,Read,Write, andEdittools. \n - Sanitization: The procedure does not include steps to sanitize or validate the content of the files being analyzed.
Audit Metadata