code-quality-specialist
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run project tests (npm test,pytest,go test) and parse logs using standard utilities likegrep,awk, andgit. These actions are local and intended for code analysis. - [PROMPT_INJECTION]: The skill is designed to ingest untrusted data, creating an indirect prompt injection surface.
- Ingestion points: Source code files and system logs (processed via
ReadandGreptools). - Boundary markers: None explicitly defined to separate data from instructions.
- Capability inventory: The agent can execute shell commands (
Bash) and modify files (Write,Edit,MultiEdit,NotebookEdit). - Sanitization: No explicit input validation or escaping is implemented for the data being analyzed.
Audit Metadata