refactor-plan-gate
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
nodeto execute a local scriptorchestrate.mjslocated in the~/.claude/skills/refactor-chain/directory. This script is part of the vendor's toolset and is used to check the status of the refactoring process. - [SAFE]: The skill manages its own state by writing a plan to
.refactor-chain/plan.mdand updating a localstate.jsonfile. These operations are restricted to the project's refactor-chain subdirectory and follow established tool protocols. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external files such as
spec.mdandtasks.mdto coordinate refactoring steps. - Ingestion points:
state.json(SKILL.md),.specify/spec.md,.specify/plan.md,tasks.md(references/spec-kit-interop.md). - Boundary markers: Not explicitly defined in the prompts for these files.
- Capability inventory: Subprocess execution via
node orchestrate.mjs(SKILL.md). - Sanitization: No explicit sanitization of file content before processing is mentioned.
Audit Metadata