extract
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown without any executable scripts or binary files. No malicious patterns, obfuscation, or unauthorized access attempts were found.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing a target codebase, which serves as an ingestion point for potentially untrusted data that could contain indirect prompt injections.
- Ingestion points: Source code files in the target directory (SKILL.md).
- Boundary markers: None specified to separate code data from instructions.
- Capability inventory: The agent is instructed to perform file system searches, read code, write new components, and delete deprecated code.
- Sanitization: No sanitization or verification of the analyzed code content is described.
Audit Metadata