dimensional-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate security auditing tool authored by a reputable vendor. It follows secure practices for state management and strictly scopes its filesystem operations to the project root.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface as it is designed to ingest and process untrusted codebase content. However, this risk is inherent to its primary purpose as a static analysis tool.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: Source code files identified during the scanning step (SKILL.md) and accessed using the Read, Grep, and Glob tools.
- [INDIRECT_PROMPT_INJECTION]: Boundary markers: Absent; the instructions do not specify the use of delimiters or 'ignore' instructions when passing code snippets to sub-agents.
- [INDIRECT_PROMPT_INJECTION]: Capability inventory: The skill utilizes Write for filesystem annotations and the Task tool for orchestrating sub-agent execution.
- [INDIRECT_PROMPT_INJECTION]: Sanitization: None; the skill processes raw codebase content to ensure high-fidelity dimensional reasoning.
Audit Metadata