no-comments
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted source code and diffs which could contain malicious instructions.
- Ingestion points: Processes the caller's files or current diff as described in SKILL.md.
- Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions embedded within the code comments.
- Capability inventory: The skill allows the agent to delete content and modify the filesystem.
- Sanitization: There is no evidence of sanitization or filtering applied to the external code before the agent processes it.
- [NO_CODE]: The skill does not contain any executable scripts, binaries, or configuration files that could pose a direct execution risk.
- [SAFE]: No other security concerns such as hardcoded credentials, malicious obfuscation, or persistence mechanisms were detected.
Audit Metadata