lens
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary focus is on codebase exploration and documentation. It guides the agent through systematic investigation using standard developer tools such as grep, glob, and Language Server Protocol (LSP) navigation.
- [SAFE]: No data exfiltration or unauthorized network operations were identified. While the skill instructs the agent to search for sensitive files (like .env) or keywords (like 'JWT_KEY'), this is explicitly within the context of identifying how a codebase handles authentication and configuration for comprehension purposes.
- [SAFE]: All external references and URLs point to legitimate research papers (arXiv), technical blogs, and well-known developer services or documentation sites (Microsoft, IEEE, ScienceDirect).
- [SAFE]: Tool execution patterns mentioned in the reference files (e.g., using
npx madgefor dependency graphs orgit logfor churn analysis) are standard industry practices for codebase auditing and do not involve remote code execution from untrusted sources. - [SAFE]: The instructions do not attempt to override safety guidelines or bypass security filters. The logic includes constraints to prevent unbounded exploration and ensures the agent maintains evidence-based claims with file:line references.
Audit Metadata