aider

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a series of bash command templates for running the aider CLI tool. These commands are intended for legitimate AI pair programming tasks.
  • [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by accepting user-provided messages and passing them as arguments to the aider command.
  • Ingestion points: Input is ingested via the --message parameter in the shell command templates in SKILL.md.
  • Boundary markers: The skill uses double quotes to wrap the message content (e.g., --message "YOUR PROMPT HERE").
  • Capability inventory: The aider tool is capable of performing file system writes, reading project files, and creating git commits.
  • Sanitization: The skill relies on standard shell quoting; no additional sanitization or instruction-filtering is documented.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 06:45 PM
Security Audit — agent-trust-hub — aider