code-quality-specialist

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run project tests (npm test, pytest, go test) and parse logs using standard utilities like grep, awk, and git. These actions are local and intended for code analysis.
  • [PROMPT_INJECTION]: The skill is designed to ingest untrusted data, creating an indirect prompt injection surface.
  • Ingestion points: Source code files and system logs (processed via Read and Grep tools).
  • Boundary markers: None explicitly defined to separate data from instructions.
  • Capability inventory: The agent can execute shell commands (Bash) and modify files (Write, Edit, MultiEdit, NotebookEdit).
  • Sanitization: No explicit input validation or escaping is implemented for the data being analyzed.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 03:27 PM