koda-jetbrains-helper
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to assist users with IDE settings and functionality. The instructions are transparent and aligned with the skill's stated purpose.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from well-known and official sources, including JetBrains and Android Studio. It also references resources from the vendor's own GitHub repository (XCode-NLP/KodaSkills).
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes data from external platforms that host community-generated content (e.g., YouTrack and GitFlic issue trackers).
- Ingestion points: URLs for JetBrains YouTrack and GitFlic issue trackers mentioned in SKILL.md.
- Boundary markers: None identified in the provided instructions.
- Capability inventory: Uses fetch_url_content and WebFetch to retrieve external text.
- Sanitization: No explicit sanitization of fetched content is defined.
Audit Metadata