code-quality
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Automates project analysis using
pnpm,tsc, andgrepfor linting and pattern matching. - [COMMAND_EXECUTION]: Employs
node -ein Step 3 to execute a JavaScript script for line-count calculations. - [COMMAND_EXECUTION]: Uses bash and PowerShell scripting in Step 8 to find dead code and unused files.
- [PROMPT_INJECTION]: Identifies an indirect prompt injection surface (Category 8) where project file data is processed by the agent.
- Ingestion points: Project file names and source code content retrieved from the file system.
- Boundary markers: None; file content is not isolated using specific markers or delimiters.
- Capability inventory: The skill utilizes
Shell,Read,Grep, andGlobtools to inspect the environment. - Sanitization: No explicit sanitization of file-based data is performed prior to inclusion in shell command executions.
Audit Metadata