brooks-debt
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is designed for static analysis of software architecture and documentation of technical debt.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting codebase content for scanning (Step 1 of the guide). However, the skill lacks high-risk capabilities such as file writing, network transmission, or dynamic code execution that would be required to exploit an injection. Mandatory Evidence Chain:
- Ingestion points: Codebase content scanned during the 'Full Decay Risk Scan' (debt-guide.md).
- Boundary markers: Not explicitly defined for the ingested code content.
- Capability inventory: The skill is restricted to information gathering and report generation; no shell execution, file system modification, or network requests are present in the logic.
- Sanitization: No explicit sanitization of codebase content is mentioned before processing.
Audit Metadata