compass
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs local file system discovery using standard shell commands like
findandwcduring itsinitandrefreshrecipes. These commands are used to calculate repository size and file distribution to build a performance-enhancing metadata cache. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface as it reads and parses project manifest files (e.g.,
package.json,Cargo.toml,pyproject.toml) and directory structures to determine which skills are most relevant to the project. This is a low-risk surface because the skill's output is restricted to providing guidance and recommendations rather than executing code or performing sensitive operations based on the ingested data. - [SAFE]: The skill is a utility for ecosystem navigation. Its primary functions involve reading local project metadata and writing a slim cache file (
.claude/compass-cache.md) to minimize context usage in subsequent sessions. It does not perform network operations, access sensitive credentials, or attempt to persist executable code.
Audit Metadata