dead-code-elimination
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute terminal commands using standard development tools including
npx,eslint,autoflake,vulture,cargo, andgo. These tools are used for their intended purpose of linting, fixing warnings, and pruning dead code. - [EXTERNAL_DOWNLOADS]: The skill downloads and installs utilities from well-known and trusted sources, such as the official Go tools repository and the NPM registry, to facilitate static analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on source code files which are externally provided data.
- Ingestion points: Reads local project source files (JavaScript, TypeScript, Python, Rust, and Go) into the agent's context.
- Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the ingested code content.
- Capability inventory: The skill has the capability to execute shell commands and modify local files.
- Sanitization: No explicit sanitization or filtering of the file content is implemented before processing.
Audit Metadata