simplify
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code changes from git diffs, which presents a potential surface for indirect prompt injection where instructions could be hidden in comments or code, though this is inherent to the skill's primary purpose as a code simplification utility.
- Ingestion points: Reads external data via
git diffoutput to identify code units for ablation (SKILL.md). - Boundary markers: None present to isolate diff content from the agent's internal instruction context.
- Capability inventory: Executes
gitcommands and a project-localcheckscript for verification (SKILL.md). - Sanitization: No sanitization or escaping of the diff content is performed before processing.
Audit Metadata