slicing-code-context
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates high security maturity, incorporating defensive programming patterns such as strict path validation and context isolation.
- [PROMPT_INJECTION]: The skill architecturally addresses the risk of indirect prompt injection from untrusted repository content. While ingestion occurs via the target directory in
scripts/build_slice_packet.py, risks are mitigated by the inclusion of a mandatoryUNTRUSTED_NOTICEin generated packets, instructions to ignore embedded code commands inSKILL.md, and the use of restricted worker agents for analysis tasks. - [EXTERNAL_DOWNLOADS]: The skill manages its dependencies via
uv, fetching thetrailmarkpackage and its standard dependencies (e.g.,tree-sitter,rustworkx,numpy) from PyPI. These resources are authored by the same vendor as the skill or are established, well-known libraries.
Audit Metadata