detekt
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes project configuration files to automate linter setup, creating a surface where malicious project content could influence agent actions.
- Ingestion points: The script
scripts/inspect-project.pyreadsbuild.gradle,build.gradle.kts,settings.gradle,settings.gradle.kts, andlibs.versions.tomlfrom the target project. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the inspection logic.
- Capability inventory: The results from the file inspection are used to drive command execution via the Gradle wrapper (
./gradlew), involving configuration generation and analysis tasks. - Sanitization: The process relies on regular expressions for data extraction but does not sanitize the input files for potential injection patterns.
Audit Metadata