deslop-simplify-ai-code
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git diffto identify changes in the codebase. This is a standard operation for code analysis and refactoring tasks. - [PROMPT_INJECTION]: The skill processes untrusted input from git diffs, creating a surface for indirect prompt injection. Malicious instructions could be hidden in the code being reviewed. Evidence chain: 1. Ingestion points: git diff (SKILL.md); 2. Boundary markers: Absent; 3. Capability inventory: Code refactoring and modification; 4. Sanitization: Absent.
- [DATA_EXFILTRATION]: No network access or data transmission patterns were identified. The analysis is performed locally on the provided code.
Audit Metadata