reduce-production-code
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and process production code, documentation, and configuration files, which are untrusted external inputs.
- Ingestion points: Production source code, test files, and documentation pages (SKILL.md, references/documentation.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential prompts embedded within the files being analyzed.
- Capability inventory: The agent has the ability to modify files, run repository-required checks, and execute CLI journeys through built entry points (SKILL.md).
- Sanitization: No explicit sanitization or content validation is required for the input data before it is processed by the agent.
Audit Metadata