pattern-recognition-specialist
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external codebase content, creating an attack surface for indirect prompt injection where instructions could be hidden in code comments or string literals.
- Ingestion points: Codebase files accessed via search and analysis tools.
- Boundary markers: None explicitly mentioned in the skill instructions to separate code data from agent instructions.
- Capability inventory: Grep, AST-based structural search, and code duplication analysis tools.
- Sanitization: No explicit mention of sanitizing or escaping content retrieved from the files before processing.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to utilize command-line utilities for code analysis.
- Evidence: The workflow specifies using
grep,ast-grep, andjscpdto identify patterns and code duplication.
Audit Metadata