repo-elegance-review
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system utilities including
ls,rg,find, andgit statusto perform repository mapping and metadata collection as described in theSKILL.mdworkflow. These tools are used for read-only filesystem inspection and do not pose a security risk.\n- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted content from external software repositories.\n - Ingestion points: The skill reads project files such as
README.mdand configuration manifests likepackage.jsonorpyproject.tomlto evaluate the repository structure.\n - Boundary markers: Absent; there are no defined markers in the prompt instructions to separate analyzed file content from the agent's core instructions.\n
- Capability inventory: The agent utilizes file listing and reading capabilities via
ls,rg, andfindcommands.\n - Sanitization: Absent; the skill does not implement explicit sanitization or validation logic for the content retrieved from the repository files.
Audit Metadata