logic-lens
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze external source code files, which creates an inherent surface for indirect prompt injection attacks where malicious content in the code could attempt to override the agent's instructions.
- Ingestion points: The skill ingests and parses local source code files (e.g., login.ts) as described in the usage examples.
- Boundary markers: There are no explicit delimiters or specific instructions for the agent to ignore potentially malicious commands embedded within the analyzed code.
- Capability inventory: The skill utilizes the agent's reasoning tools; no additional scripts with system-level or network capabilities are included.
- Sanitization: No input filtering or sanitization protocols for the analyzed code are described.
- [EXTERNAL_DOWNLOADS]: The documentation recommends installation via 'npx agentic-awesome-skills', which involves running code from a community-contributed package whose maintainer is not in the trusted vendor list.
Audit Metadata