analyze
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting and analyzing untrusted codebase content, presenting an attack surface for indirect prompt injection.
- Ingestion points: The skill reads implementation details, interfaces, and domain definitions from external sources.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the agent.
- Capability inventory: The skill uses research tools and suggests technical implementation methods based on its findings.
- Sanitization: There is no evidence of sanitization or escaping for the ingested codebase data.
- [COMMAND_EXECUTION]: The package includes a local Python script for validating fixtures and internal skill consistency.
- Evidence: The README instructs running 'scripts/check-fixture.py' with Python 3.9+. The script performs hashing and local file reads on the skill's own directory to ensure integrity.
Audit Metadata