codemap
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to facilitate codebase exploration and document management. It defines helper functions
_finderand_rgto abstract the use offd/findandrg/grepfor searching files. It also usesmkdirto create directories,wcto verify outputs, andgitfor optional commits of the generated documentation. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of reading and processing untrusted codebase content.
- Ingestion points: Exploration commands like
cat,rg, andfdare used to read file contents across the project repository. - Boundary markers: The prompts for the sub-agents do not specify delimiters or include explicit instructions to disregard potential commands embedded within the analyzed source files.
- Capability inventory: The orchestration involves spawning background processes via the
Tasktool, writing persistent files with theWritetool, and executing git commands. - Sanitization: There is no evidence of sanitization or safety validation for content ingested from the codebase before it is processed by the agents.
Audit Metadata