in-place-file-mutation

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructional content on optimizing agentic coding workflows by using in-place file mutation instead of temporary backup files. This is a legitimate development optimization practice.
  • [SAFE]: The included Python code snippet demonstrates an atomic write pattern using standard library functions (os.replace, pathlib.Path.write_text). It does not involve unauthorized network operations, credential access, or privilege escalation.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface involving the reading and writing of file content. It implements basic validation by checking for the existence of the target substring before modification. As this is a workflow directive for tool implementation rather than a skill processing external untrusted data, the risk is minimal.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:48 PM