compass
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository configuration files to determine agent affinities for its recommendation engine.
- Ingestion points: The
initandrefreshworkflows inreference/cache-recipes.mdread from project manifest files includingpackage.json,Cargo.toml,pyproject.toml, andCLAUDE.md. - Boundary markers: No specific delimiters or instructions to ignore potentially embedded prompts are applied during the scanning of these files.
- Capability inventory: The skill is restricted to navigation, guidance, and metadata curation; it does not possess network tools or arbitrary code execution capabilities.
- Sanitization: No content validation or sanitization is performed on the ingested manifest data before it is used to score skill affinity.
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands to analyze the repository structure and size.
- Evidence: The
initrecipe described inreference/cache-recipes.mdutilizesfindandwc -lto count files for repository sizing and cache optimization logic.
Audit Metadata