tech-debt
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the scope of codebase auditing and technical debt management. No patterns of data exfiltration, obfuscation, or unauthorized access were identified.
- [COMMAND_EXECUTION]: The skill utilizes
Bashto run standard search utilities such asag(Silver Searcher) andgrep. These tools are used locally to discover code patterns and verify function usages for safe deletion. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest and analyze untrusted content (comments and string literals) from the codebase being audited. Ingestion points: Content is ingested from files via the
Read,Grep,Glob, andLSPtools. Boundary markers: No specific delimiters are implemented to isolate ingested code content from the agent's instructions. Capability inventory: The skill has access to powerful tools includingBashfor command execution andWrite/Editfor filesystem modifications. Sanitization: No explicit sanitization or filtering of codebase content is mentioned, which is expected for a code auditing utility.
Audit Metadata