code-upkeep
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git diffto identify modified files andpoetry run pytestto execute tests. These are standard local operations for development environments.\n- [PROMPT_INJECTION]: The skill processes .py source files which are untrusted ingestion points. It lacks explicit boundary markers or sanitization, potentially allowing malicious code comments to influence the agent. Capabilities include file modification (Edit tool) and command execution (pytest).\n- [REMOTE_CODE_EXECUTION]: The skill dynamically generates Python test code and executes it using pytest. This is a core feature for automated maintenance and is restricted to the project's local directory.\n- [SAFE]: All operations are standard for code auditing and testing tasks, and no malicious exfiltration or external downloads were detected.
Audit Metadata