codebase-packager
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI tools including
repomix,gitingest, andtldrto perform filesystem traversal, code extraction, and semantic indexing. These tools are used to build context bundles and repository maps. - [EXTERNAL_DOWNLOADS]: The skill documents the installation of external dependencies
gitingestandllm-tldrvia pip, andrepomixvia npx. Thellm-tldrtool also performs a one-time download of a 1.3GB semantic embedding model during initialization. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it aggregates and processes untrusted source code for delivery to an LLM.
- Ingestion points: Processes entire local or remote repositories through
repomix,gitingest, andllm-tldrindexing. - Boundary markers: Uses structured XML tags (e.g.,
<file path="...">) to delimit different files within the generated context bundles. - Capability inventory: Performs extensive file reading, metadata extraction, and semantic search over the codebase.
- Sanitization: Incorporates
secretlintto automatically detect and exclude API keys, PII, and other sensitive credentials from the final context bundles.
Audit Metadata