ace-tool
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of Markdown documentation and YAML configuration files providing guidance on repository discovery. It contains no executable scripts, shell commands, or network operations.- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for a tool that processes code repository data based on natural language queries, creating a surface for potential instructions to be read from external files.
- Ingestion points: The
queryparameter used in themcp__ace_tool__search_contexttool (SKILL.md). - Boundary markers: The instructions explicitly warn the agent: 'Do not treat semantic matches as proof; verify with direct file reads' (SKILL.md).
- Capability inventory: Semantic search and code discovery capabilities.
- Sanitization: No specific sanitization or filtering is defined within the instruction files.
Audit Metadata