code-simplifier
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and refactor external Rust source code, which creates a potential surface for indirect prompt injection attacks where malicious comments or code patterns could influence agent behavior.
- Ingestion points: The skill uses
Read,Grep, andGlobtools to access and process the contents of local Rust files. - Boundary markers: There are no explicit instructions or delimiters defined to separate untrusted code content from the agent's system instructions.
- Capability inventory: The skill possesses the
Editcapability, allowing it to modify files based on its analysis, and suggests the execution of shell commands likecargo testandgrepfor verification. - Sanitization: The instructions do not specify any validation or sanitization logic to strip potential injection attempts from the processed source code.
Audit Metadata