tech-debt
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands and development tools such as
git,find,go test,pytest,npx jest, andgh apito gather project metrics and test coverage data. These operations are conducted locally and align with the skill's purpose of analyzing project health. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting and analyzing various parts of a repository, including documentation and code comments.
- Ingestion points: Codebase files (SKILL.md, references/analysis-patterns.md)
- Boundary markers: Absent
- Capability inventory: Shell command execution (
git,go,pytest,npx,gh) and file system write access for report generation - Sanitization: Absent
Audit Metadata