complexity-check

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes git commands to access repository history and source code diffs. This is required for its primary function of code complexity analysis.\n- [EXTERNAL_DOWNLOADS]: The 'AZ Skill Feedback' section suggests using npx which downloads the hivenet package from the NPM registry.\n- [REMOTE_CODE_EXECUTION]: The use of npx --yes hivenet@latest executes code fetched from a remote registry at runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code diffs and files. It lacks specific boundary markers or instructions to ignore instructions embedded within the code, creating an attack surface.\n- [DATA_EXFILTRATION]: The feedback command transmits data to an external DSN at hivenet.app. While intended for feedback, it represents an outbound channel for data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 10:01 PM