gitnexus-guide

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions direct the agent to run a local script node .gitnexus/run.cjs analyze to refresh the codebase index when it is reported as stale.
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of external codebase data, which presents a surface for indirect prompt injection. 1. Ingestion points: Ingests codebase metadata and relationships via MCP tools (query, context, impact, detect_changes, cypher) and gitnexus:// resource URIs. 2. Boundary markers: None identified; the instructions do not specify delimiters or warnings for the agent to ignore instructions embedded within the codebase data. 3. Capability inventory: The skill environment supports command execution (node) and file system modifications (via the rename tool). 4. Sanitization: No content sanitization or validation methods are described for processing external codebase content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 02:34 AM
Security Audit — agent-trust-hub — gitnexus-guide