security-threat-model
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection as it processes untrusted content from the repositories it is tasked to analyze.
- Ingestion points: Source code files, configuration, and repository metadata read via file system operations and
ripgrepsearch results. - Boundary markers: The skill uses Markdown templates for structure but lacks explicit delimiters or instructions to the model to treat the ingested code as data only and to ignore any embedded instructions.
- Capability inventory: The skill has the capability to read all files within the repository path and write the final analysis to a Markdown file. It does not have network access or arbitrary command execution capabilities beyond searching.
- Sanitization: While the skill includes proactive instructions to redact secrets and credentials from the output, it does not include measures to detect or mitigate prompt injection attempts contained within the analyzed data.
- [COMMAND_EXECUTION]: The skill uses the
ripgrep(rg) command-line utility for exploring the codebase. This is a standard and appropriate use of a tool for the skill's intended purpose.
Audit Metadata