tl-complexity-assessment
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides tools for static code analysis and does not exhibit any malicious patterns.
- [COMMAND_EXECUTION]: The included scripts (
complexity-scan.shandcomplexity-scan.ps1) use standard commands likefind,wc, andrg(ripgrep) to gather metrics. These scripts run locally and are consistent with the skill's stated purpose of analyzing code complexity. - [EXTERNAL_DOWNLOADS]: No unauthorized or suspicious remote downloads are performed. The documentation references well-known open-source tools such as
madge,dpdm, anddependency-cruiseras optional dependencies for advanced analysis. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests local source code for analysis, it does so through static scanning (line counts and regex). It does not execute the code or pass untrusted content to the LLM in a way that poses a significant injection risk.
Audit Metadata