core-coder
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- COMMAND_EXECUTION (SAFE): The skill uses the
Bashtool and lifecycle hooks to execute local commands such asnpm run lint, which is consistent with its primary purpose as a coder agent.\n- PROMPT_INJECTION (LOW): The agent processes external data from tasks and files which could contain malicious instructions (indirect prompt injection surface).\n - Ingestion points: The
$TASKenvironment variable and local files accessed viaReadandGreptools.\n - Boundary markers: Absent; the skill does not use delimiters to isolate instructions from data.\n
- Capability inventory: Includes
Bashfor command execution andWrite/Editfor file modification.\n - Sanitization: No explicit sanitization or validation of input data is defined in the skill logic.
Audit Metadata