commodity-pricing
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it ingests and processes content from untrusted local codebases. This is a characteristic of its primary function and is assessed as safe given the lack of executable capabilities.
- Ingestion points: The skill analyzes all files within the specified commodity pricing codebase or the current working directory.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the analysis workflow.
- Capability inventory: The skill is restricted to generating a report and does not have tools for command execution, network requests, or sensitive file manipulation.
- Sanitization: No sanitization or filtering of codebase content is implemented.
- [SAFE]: The skill reads project configuration files (e.g., requirements.txt, package.json, go.mod) and logs telemetry to a local directory (~/.claude/projects/). These actions are restricted to the local environment, do not involve remote communication, and are consistent with the skill's purpose for system discovery and performance monitoring.
Audit Metadata