reverse-engineer

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it performs brownfield onboarding by reading and analyzing untrusted external data from the user's repository.\n
  • Ingestion points: Codebase manifests (e.g., package.json, pyproject.toml, go.mod) and source files read during the repository survey phase (SKILL.md, Step 1).\n
  • Boundary markers: Absent. The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious commands embedded within the code or comments of the files being analyzed.\n
  • Capability inventory: The skill utilizes tool calls for reading files, writing documentation artifacts to the local 'specforge/' directory, and executing restricted shell commands via bash (git, ls, find).\n
  • Sanitization: Absent. There is no mention of sanitizing or escaping content retrieved from the codebase before it is processed by the agent to generate documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 11:43 AM
Security Audit — agent-trust-hub — reverse-engineer