code-search
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Uses
npxto execute therepomixpackage, which involves fetching the package from the official npm registry if it is not present locally. - [COMMAND_EXECUTION]: Executes the command
npx repomix --stdoutto pack the repository content into a single output for code analysis. - [PROMPT_INJECTION]: The skill processes repository data via
npx repomix(Ingestion point: repository files). While it lacks explicit delimiters for the packed content (Boundary markers: absent), it is a standard tool for providing LLM context (Capability inventory: npx repomix). No specific sanitization of the packed source code is performed (Sanitization: absent).
Audit Metadata