codebase-mapper
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes arbitrary source code from the local filesystem to identify patterns and technical debt, creating an attack surface for indirect prompt injection.
- Ingestion points: Files are read using Select-String and Get-Content across the codebase, including the src/ directory.
- Boundary markers: The instructions lack explicit delimiting or warnings to ignore instructions embedded within the analyzed source code.
- Capability inventory: The skill has read access to the project filesystem and writes documentation to new files.
- Sanitization: No content sanitization or filtering is specified for the data extracted from the codebase before it is included in the output reports.
Audit Metadata