rightcode-codeprobe-solid
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it is designed to ingest and process untrusted data from user source code files.
- Ingestion points: The skill uses
Read,Grep, andGlobtools to access and analyze the contents of external source code files (SKILL.md). - Boundary markers: There are no explicit instructions for the agent to wrap external content in delimiters or to ignore potential instructions embedded within the audited code.
- Capability inventory: The agent has access to the
Bashtool and file system manipulation tools (Read,Grep,Glob), which increases the potential impact if a successful injection occurs. - Sanitization: The skill lacks explicit sanitization or validation logic for the content of the files it reads before they are analyzed by the model.
Audit Metadata