learn-codebase
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Python script to discover and parse the metadata of other installed agent skills.
- Evidence:
SKILL.mddirects the agent to runscripts/list_skills.pyto obtain full skill descriptions for selection purposes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository being analyzed to generate architecture and data flow documentation.
- Ingestion points: Repository documents (e.g.,
README.md,AGENTS.md), project manifests (package.json,pyproject.toml,go.mod), and framework configuration files. - Boundary markers: Not present; the instructions do not require the use of specific delimiters to isolate external codebase content during analysis.
- Capability inventory: The skill performs file reads across the repository, writes to
docs/CODEBASE_OVERVIEW.mdas described inSKILL.md, and executes the localscripts/list_skills.pyutility. - Sanitization: Not mentioned; the agent relies on the content of external files to populate the
docs/CODEBASE_OVERVIEW.mdtemplate.
Audit Metadata