harden
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses multiple shell script blocks to perform repository audits. These scripts utilize common utilities like
git,grep,find, andwcto analyze the local environment. It also includes a Python one-liner to parse JSON data from a local file. All execution is confined to the local filesystem and intended for reporting status to the user. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests data from external files.
- Ingestion points: Reads from
CLAUDE.md,.gitignore, andcontacts.json(SKILL.md). - Boundary markers: Absent; file contents are processed without delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill can execute various subprocesses (
git,grep,find,python3) which could potentially be influenced by malicious content in audited files. - Sanitization: Absent; content is interpreted for pattern matching without specific escaping or validation.
- Note: The risk is minimal because the skill does not exfiltrate data and its operations are primarily read-only audits.
Audit Metadata