nuke-comments
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code comments which could contain malicious instructions. \n
- Ingestion points: The agent reads source files within the repository to identify and classify comments as keepers or noise. \n
- Boundary markers: The instructions do not define specific delimiters for separating the instructions from the data being analyzed. \n
- Capability inventory: The agent has the ability to write to the filesystem and execute shell commands (linting, testing, and a verification script). \n
- Sanitization: The
verify-comments-only.shscript acts as a strong logical control by usingesbuildto prove that only non-functional changes (comments/whitespace) occurred.\n- [EXTERNAL_DOWNLOADS]: Theverify-comments-only.shscript utilizes package runners likenpx,bunx, orpnpm dlxto executeesbuild. These tools may download theesbuildbinary from public registries if it is not already cached locally.\n- [COMMAND_EXECUTION]: The workflow involves executing various local commands, including project test suites, linters,git grepfor directive auditing, and the providedverify-comments-only.shscript for diff verification.
Audit Metadata