harden

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses multiple shell script blocks to perform repository audits. These scripts utilize common utilities like git, grep, find, and wc to analyze the local environment. It also includes a Python one-liner to parse JSON data from a local file. All execution is confined to the local filesystem and intended for reporting status to the user.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests data from external files.
  • Ingestion points: Reads from CLAUDE.md, .gitignore, and contacts.json (SKILL.md).
  • Boundary markers: Absent; file contents are processed without delimiters or instructions to ignore embedded commands.
  • Capability inventory: The skill can execute various subprocesses (git, grep, find, python3) which could potentially be influenced by malicious content in audited files.
  • Sanitization: Absent; content is interpreted for pattern matching without specific escaping or validation.
  • Note: The risk is minimal because the skill does not exfiltrate data and its operations are primarily read-only audits.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 01:15 PM
Security Audit — agent-trust-hub — harden