refactor-worker
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands for development tasks including
npm run test,npm run typecheck,npm run build,npm run lint, andwc. It also usesgitfor diffing and managing the repository state. - [PROMPT_INJECTION]: The skill contains instructions to bypass local environment constraints, specifically directing the agent to use the
--no-verifyflag withgit committo circumvent pre-commit hooks and to manually unstage changes in configuration files likepackage.json. - [PROMPT_INJECTION]: Indirect Prompt Injection Surface: The skill is designed to ingest and process external TypeScript files which constitutes an indirect injection surface.
- Ingestion points: Files specified in the
<files-to-refactor>and<affected-files>placeholders (SKILL.md). - Boundary markers: Absent; there are no specific instructions to delimit or treat the code content as untrusted data.
- Capability inventory: The agent has access to
npm run(which can execute arbitrary scripts defined in the local environment),git, and file system read/write operations (SKILL.md). - Sanitization: Absent; the skill does not specify any sanitization or validation of the content within the files being refactored.
Audit Metadata