code-research
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for architectural and code research using the
github_codebase_searchtool. The author metadata identifies 'morph', which differs from the provided context 'ujang19', but this is a minor inconsistency with no identified security impact. - [PROMPT_INJECTION]: The skill interacts with untrusted external content, which creates a surface for indirect prompt injection.
- Ingestion points: Content retrieved from external repositories via the
github_codebase_searchtool (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or 'ignore' instructions for the retrieved content.
- Capability inventory: The skill does not employ dangerous capabilities such as local command execution, file system modification, or network exfiltration.
- Sanitization: No sanitization or validation logic is specified for the data ingested from external repositories.
Audit Metadata