code-upkeep

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git diff to identify modified files and poetry run pytest to execute tests. These are standard local operations for development environments.\n- [PROMPT_INJECTION]: The skill processes .py source files which are untrusted ingestion points. It lacks explicit boundary markers or sanitization, potentially allowing malicious code comments to influence the agent. Capabilities include file modification (Edit tool) and command execution (pytest).\n- [REMOTE_CODE_EXECUTION]: The skill dynamically generates Python test code and executes it using pytest. This is a core feature for automated maintenance and is restricted to the project's local directory.\n- [SAFE]: All operations are standard for code auditing and testing tasks, and no malicious exfiltration or external downloads were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 05:37 PM