skills/0froq/skills-pack/simplify/Gen Agent Trust Hub

simplify

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code changes from git diffs, which presents a potential surface for indirect prompt injection where instructions could be hidden in comments or code, though this is inherent to the skill's primary purpose as a code simplification utility.
  • Ingestion points: Reads external data via git diff output to identify code units for ablation (SKILL.md).
  • Boundary markers: None present to isolate diff content from the agent's internal instruction context.
  • Capability inventory: Executes git commands and a project-local check script for verification (SKILL.md).
  • Sanitization: No sanitization or escaping of the diff content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 09:18 AM