repo-quality-orchestrator

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard development scripts including lint:fix, typecheck, build, test, and test:e2e to verify the codebase during the remediation process.
  • [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it is designed to read and analyze arbitrary source code from the repository.
  • Ingestion points: Processes TypeScript source files within the target repository during the auditing phase.
  • Boundary markers: Lacks explicit delimiters or instructions to ignore potential instructions embedded within the analyzed source code.
  • Capability inventory: Possesses the ability to write to files and execute shell commands for build and test processes.
  • Sanitization: No specific sanitization of ingested code content is performed prior to analysis, though this is expected behavior for a code-auditing tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 01:21 PM
Security Audit — agent-trust-hub — repo-quality-orchestrator