re-visualize-logic
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool as a fallback mechanism to locate method boundaries usinggrep. While this is a powerful tool, its use is restricted to local text processing as part of the primary analysis logic. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted source code as its primary input. Malicious instructions embedded within the analyzed code (e.g., in comments) could theoretically attempt to influence the agent.
- Ingestion points: Source code is ingested through the
Readandmcp__serena__find_symboltools during the 'Read Target Code' phase. - Boundary markers: The skill does not define specific delimiters or 'ignore' instructions when passing the read source code to the LLM for analysis.
- Capability inventory: The agent possesses the
Bash,Write,Read,Grep, andGlobtools, along with specialized symbol searching tools. - Sanitization: No explicit sanitization or validation of the input source code is performed prior to the analysis and flowchart generation steps.
Audit Metadata