shinka-inspect
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes program code and feedback from a SQLite database and interpolates it into a Markdown bundle, creating a potential surface for indirect prompt injection if the resulting bundle is processed by another agent.
- Ingestion points:
scripts/inspect_best_programs.pyloads data from a local database file (defaulting toprograms.sqlite) using theload_programs_to_dfutility. - Boundary markers: The output code snippets are wrapped in standard Markdown code blocks (e.g.,
```pythonor```text). - Capability inventory: The script performs file reads and writes (
Path.write_text) but does not execute the data it processes. - Sanitization: The script truncates code length based on configuration but does not otherwise sanitize or filter the content for malicious instructions.
- [DYNAMIC_EXECUTION]: The script dynamically modifies
sys.pathto import theshinkautility library from the repository root if it is not already available in the Python environment. This is a common developer pattern for local module resolution. - [COMMAND_EXECUTION]: The skill documentation includes standard shell commands for listing directory contents and executing the Python inspection script, which are appropriate for its function as a developer tool.
Audit Metadata