rabbit-readme-improver
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes its own Python script
scripts/readme_check.pyas part of the README auditing workflow. The test suite also utilizessubprocess.runto invoke the checker script for regression testing intests/helpers.pyand various test files. - [DYNAMIC_EXECUTION]: The skill performs dynamic module loading. The checker script
scripts/readme_check.pyusesimportlib.utilto load a sister scriptscan.pyfrom therabbit-writesskill directory. Additionally, the custom test runnertests/run.pyuses__import__to dynamically load test files for execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes
README.mdfiles as untrusted data (Ingestion points: project documentation). The skill has capabilities for local file reading and script execution. This attack surface is addressed by a safety scanning band (Sanitization:injectionmodule scanning) designed to detect concealed instructions or prompt injections within the analyzed content.
Audit Metadata