slopwatch
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the Slopwatch.Cmd package from NuGet, a well-known package registry. This is a standard procedure for installing .NET global or local tools.
- [COMMAND_EXECUTION]: The skill guides the agent to execute several CLI commands using the slopwatch tool, including slopwatch init for baselining and slopwatch analyze for code verification. These commands are focused on static code analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it processes code files which are considered untrusted data.
- Ingestion points: Source code files (.cs), project configurations (.csproj, .props), and test scripts.
- Boundary markers: Analysis is targeted at files within the git repository or specific directories.
- Capability inventory: Executes local CLI commands to analyze file content.
- Sanitization: The tool provides structured feedback on code smells which the agent uses to guide code modifications.
Audit Metadata