gitnexus-debugging
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of instructions for using legitimate debugging tools. No malicious patterns such as data exfiltration, obfuscation, or unauthorized remote code execution were found.
- [COMMAND_EXECUTION]: Provides documentation for a maintenance command (
node .gitnexus/run.cjs analyze) to be run manually by the user in the terminal to refresh the code index. - [PROMPT_INJECTION]: The skill interacts with codebase data and user queries, creating a surface for indirect prompt injection. 1. Ingestion points: User-provided error symptoms and repository code symbols are ingested via the
queryandcontexttools. 2. Boundary markers: No delimiters or isolation markers are defined in the workflow instructions. 3. Capability inventory: The agent can read repository files and trace call hierarchies but has no network-send or destructive capabilities. 4. Sanitization: No explicit sanitization or validation of the ingested data is described within the skill.
Audit Metadata