qe-code-intelligence
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends executing
npx ruflo doctor --fixto address initialization errors, which triggers a download and execution from the NPM registry. - [COMMAND_EXECUTION]: Relies on the
aqecommand-line utility for core operations such as indexing (aqe kg index), searching (aqe kg search), and dependency mapping (aqe kg deps). - [DATA_EXFILTRATION]: The skill indexes the contents of the
src/directory, extracting entity relationships and generating embeddings that are stored in theAgentDBvector database. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it processes untrusted local source code for indexing and context generation.
- Ingestion points: Processes all TypeScript files in the source directory (
SKILL.md). - Boundary markers: No delimiters or instructions are provided to the agent to ignore embedded commands in the analyzed code.
- Capability inventory: The skill uses the
aqetool to parse code and extract metadata, which is then used to generate intelligent context for AI operations (SKILL.md). - Sanitization: No sanitization or validation of the ingested code content is performed before it is used to construct knowledge graphs or search results.
Audit Metadata