code-audit

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard documentation for executing security auditing tools like semgrep on a codebase.
  • [INDIRECT_PROMPT_INJECTION]: The skill's functionality involves processing source code, which creates a potential surface for indirect prompt injection if the code being audited contains malicious instructions designed to subvert the agent's behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:56 PM
Security Audit — agent-trust-hub — code-audit