gitnexus-guide
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to run a local script
node .gitnexus/run.cjs analyzeto refresh the codebase index when it is reported as stale. - [PROMPT_INJECTION]: The skill facilitates the ingestion of external codebase data, which presents a surface for indirect prompt injection. 1. Ingestion points: Ingests codebase metadata and relationships via MCP tools (
query,context,impact,detect_changes,cypher) andgitnexus://resource URIs. 2. Boundary markers: None identified; the instructions do not specify delimiters or warnings for the agent to ignore instructions embedded within the codebase data. 3. Capability inventory: The skill environment supports command execution (node) and file system modifications (via therenametool). 4. Sanitization: No content sanitization or validation methods are described for processing external codebase content.
Audit Metadata