component-identification-sizing
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves reading and parsing external source code files (JavaScript, Java, Python, etc.) to calculate size metrics. This ingestion of untrusted data creates a surface for indirect prompt injection, where malicious instructions hidden in code comments or strings could attempt to subvert the agent's analysis.\n- Ingestion points: Source files within the codebase being analyzed, as described in the 'Analysis Process' of
SKILL.md.\n- Boundary markers: The instructions do not include specific delimiters or 'ignore' directives to prevent the agent from following instructions found within the analyzed data.\n- Capability inventory: The skill utilizes file system read access to perform its analysis.\n- Sanitization: There is no mention of sanitizing or filtering the content of the files before processing.
Audit Metadata