codebase-orientation
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted data (an unfamiliar codebase).
- Ingestion points: The agent is instructed to process a "Repo URL or local path" (SKILL.md).
- Boundary markers: There are no explicit instructions or delimiters defined to ignore potential instructions embedded within the codebase being analyzed.
- Capability inventory: The skill requires the agent to use filesystem or repository access tools to locate entry points and map folders.
- Sanitization: No sanitization or validation of the codebase content is specified before the agent processes it.
Audit Metadata