refactor-backend-08-common-extract

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill ingests and processes untrusted source code and build configuration files, which represents a surface for indirect prompt injection if the analyzed files contain malicious instructions.
  • Ingestion points: Project source files (Java, Kotlin, etc.) and build configuration files (Maven/Gradle) are read from the project directory in SKILL.md and references/method.md.
  • Boundary markers: No specific delimiters or warnings to ignore embedded instructions are present in the processing logic.
  • Capability inventory: The skill utilizes file reading, file copying (cp), file deletion (rm), and text-based modification of import statements and build dependencies across multiple files.
  • Sanitization: No sanitization or validation of the content within the processed source code is performed beyond structural grep checks.
  • [COMMAND_EXECUTION]: The skill uses shell commands for file management and search tasks.
  • Evidence: Uses cp for moving files and grep for dependency analysis and reference searching as described in the Method section of SKILL.md and references/method.md.
  • Context: These operations are standard and necessary for the skill's primary purpose of code refactoring.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 01:02 AM
Security Audit — agent-trust-hub — refactor-backend-08-common-extract