complexity-check
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
gitcommands to access repository history and source code diffs. This is required for its primary function of code complexity analysis.\n- [EXTERNAL_DOWNLOADS]: The 'AZ Skill Feedback' section suggests usingnpxwhich downloads thehivenetpackage from the NPM registry.\n- [REMOTE_CODE_EXECUTION]: The use ofnpx --yes hivenet@latestexecutes code fetched from a remote registry at runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code diffs and files. It lacks specific boundary markers or instructions to ignore instructions embedded within the code, creating an attack surface.\n- [DATA_EXFILTRATION]: The feedback command transmits data to an external DSN athivenet.app. While intended for feedback, it represents an outbound channel for data.
Audit Metadata