skills/rshade/agent-skills/tech-debt/Gen Agent Trust Hub

tech-debt

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes external code and configuration files, which could contain malicious comments or data designed to influence the agent's analysis or summary.
  • Ingestion points: Source code files identified in Step 1 and analyzed in Steps 3-6, including architecture, tests, documentation, and infrastructure configuration files.
  • Boundary markers: Absent. The skill does not define specific delimiters or "ignore" instructions for the content being read.
  • Capability inventory: File system discovery (find), file reading (grep), shell command execution (git, go, pytest, npx, gh), and report generation (TECH_DEBT.md).
  • Sanitization: Absent. There is no evidence of filtering or sanitizing the input from the analyzed files before processing.
  • [COMMAND_EXECUTION]: The skill executes standard development and analysis tools locally to gather metrics.
  • Fetches repository configuration and branch protection status using the GitHub CLI (gh api).
  • Executes project-specific testing and coverage tools including go test, pytest, and jest via npx.
  • Performs repository history analysis using git commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:27 AM