repomix
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/repomix_batch.pyusessubprocess.runto execute therepomixCLI andnpxfor repository processing. This is the intended functionality of the batch utility. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the
repomixpackage from the NPM registry vianpxwhen remote repositories are targeted. It also references the officialyamadashy/repomixGitHub repository. - [PROMPT_INJECTION]: The skill is designed to aggregate codebase content for LLM consumption, which creates a surface for indirect prompt injection if the source code contains malicious instructions.
- Ingestion points: File contents from local or remote repositories processed by
scripts/repomix_batch.py. - Boundary markers: Structural delimiters such as XML tags, Markdown headers, and JSON keys are used to separate individual file contents.
- Capability inventory: The agent consuming the packaged output may have capabilities like file system access, network operations, or tool execution depending on its specific configuration.
- Sanitization: The tool integrates Secretlint to detect sensitive data (API keys, secrets), though it does not specifically sanitize natural language instructions within the code.
Audit Metadata