reverse-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it performs brownfield onboarding by reading and analyzing untrusted external data from the user's repository.\n
- Ingestion points: Codebase manifests (e.g., package.json, pyproject.toml, go.mod) and source files read during the repository survey phase (SKILL.md, Step 1).\n
- Boundary markers: Absent. The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious commands embedded within the code or comments of the files being analyzed.\n
- Capability inventory: The skill utilizes tool calls for reading files, writing documentation artifacts to the local 'specforge/' directory, and executing restricted shell commands via bash (git, ls, find).\n
- Sanitization: Absent. There is no mention of sanitizing or escaping content retrieved from the codebase before it is processed by the agent to generate documentation.
Audit Metadata