refactor-backend-08-common-extract
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests and processes untrusted source code and build configuration files, which represents a surface for indirect prompt injection if the analyzed files contain malicious instructions.
- Ingestion points: Project source files (Java, Kotlin, etc.) and build configuration files (Maven/Gradle) are read from the project directory in
SKILL.mdandreferences/method.md. - Boundary markers: No specific delimiters or warnings to ignore embedded instructions are present in the processing logic.
- Capability inventory: The skill utilizes file reading, file copying (
cp), file deletion (rm), and text-based modification of import statements and build dependencies across multiple files. - Sanitization: No sanitization or validation of the content within the processed source code is performed beyond structural grep checks.
- [COMMAND_EXECUTION]: The skill uses shell commands for file management and search tasks.
- Evidence: Uses
cpfor moving files andgrepfor dependency analysis and reference searching as described in theMethodsection ofSKILL.mdandreferences/method.md. - Context: These operations are standard and necessary for the skill's primary purpose of code refactoring.
Audit Metadata