ln-654-resource-lifecycle-auditor
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to fetch configuration and reference files from the author's GitHub repository (
raw.githubusercontent.com/levnikolaevich/claude-code-skills) using WebFetch if the local 'shared/' directory is unavailable. These resources are vendor-owned and used for instructional context. - [COMMAND_EXECUTION]: Utilizes
Bash,Grep, and specialized MCP tools (find_references,trace_paths) to perform static analysis on the target codebase. These operations are restricted to the intended purpose of auditing resource management patterns. - [PROMPT_INJECTION]: As an auditing tool, the skill ingests untrusted data from the user's codebase.
- Ingestion points: Reads files and performs directory traversal via
scan_path. - Boundary markers: None explicitly defined in the instructions for separating audit data from agent instructions.
- Capability inventory: Includes
Bash,Read,Write, and graph-based reference finding tools. - Sanitization: No specific sanitization or filtering of codebase content is mentioned before processing.
Audit Metadata