common-schema-audit
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed for static analysis of source code.
- [COMMAND_EXECUTION]: The skill uses Bash tools (
go,grep,find,ls) to perform read-only analysis of the local codebase. These commands are used to identify constant definitions in dependencies and search for specific code patterns in internal implementation files. - [EXTERNAL_DOWNLOADS]: The skill references the
github.com/redpanda-data/benthosrepository to locate dependency source code in the Go module cache. This is a legitimate vendor resource associated with the skill's author. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external source code data.
- Ingestion points: Go source files in the
internal/impl/directory and dependency files located in theGOMODCACHE. - Boundary markers: The instructions delegate tasks to an 'Explore agent' using plain text descriptions, without strict structural delimiters for code content.
- Capability inventory: The skill has access to restricted Bash commands (
go,grep,find) and filesystem read operations. - Sanitization: There is no explicit sanitization or filtering of the code content being analyzed.
Audit Metadata