c3
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled CLI binary via a shell script wrapper (
bin/c3x.sh). The script handles platform detection and local version management by identifying the appropriate OS/ARCH binary and cleaning up older versions within its own directory. This is a standard and secure pattern for distributing platform-specific tools.\n- [DATA_EXFILTRATION]: Data access is scoped to the project's source code and the dedicated.c3/documentation folder. The skill reads code files to map them to architectural components and audits documentation for drift. No patterns indicating network exfiltration or access to sensitive system files (e.g., .ssh, .aws) were found.\n- [PROMPT_INJECTION]: The instructions provide a structured and authoritative framework for the agent, emphasizing the use of the C3 CLI as the single source of truth. It includes clear boundaries for documentation tasks and requires the agent to follow established schemas and verification steps, minimizing the risk of behavioral overrides.
Audit Metadata