claude
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
claudeCLI with various arguments to perform code analysis, summarize changes, and apply automated edits. Evidence:claude -pcommands used throughout SKILL.md for analysis and implementation tasks. - [EXTERNAL_DOWNLOADS]: The skill performs an automated version check against a remote repository and suggests downloading updates via npx. Evidence: Silently fetches
https://raw.githubusercontent.com/abpai/skills/main/versions.jsonand suggests runningnpx skills update claudeif a newer version is found. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface typical of code analysis tools.
- Ingestion points: Local repository files and git diffs analyzed by
claude -pin SKILL.md. - Boundary markers: Absent; no explicit delimiters or "ignore embedded instructions" warnings are included in the prompt templates.
- Capability inventory: The
claudeCLI can perform file modifications (acceptEditsmode) and other automated repository actions. - Sanitization: Absent; repository content is passed to the tool without specific sanitization or escaping logic.
Audit Metadata