quality
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard command-line tools for static analysis and repository diagnostics.
- Evidence: usage of
git log,git diff,cloc, andradonwithincode-health.mdfor analyzing code frequency and complexity. - [EXTERNAL_DOWNLOADS]: The skill references established package managers and security auditing tools which are common in development workflows.
- Evidence: execution of
npm auditandpip-auditfor dependency checking, andnpx eslintfor linting incode-health.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from git logs and tool outputs which could theoretically contain malicious content, but it does so within a limited capability context.
- Ingestion points:
git logoutput, linter reports, and audit logs. - Boundary markers: Not explicitly defined in the provided snippets.
- Capability inventory: Limited to
Read,Grep, andGlobtools. - Sanitization: No explicit sanitization of tool output before display, however, this is standard for diagnostic tools.
Audit Metadata