coding-standards
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation for development best practices and does not include any malicious instructions, obfuscated code, or unauthorized network operations.- [PROMPT_INJECTION]: The skill is intended to be used for reviewing and refactoring existing code, which exposes a surface for indirect prompt injection if the code being processed contains malicious instructions embedded in comments or strings.
- Ingestion points: The skill acts on code files and project structures provided by the user for quality review or refactoring (referenced in SKILL.md under When to Activate).
- Boundary markers: There are no explicit instructions for the agent to distinguish between the guidance provided in the skill and potential instructions found within the code being analyzed.
- Capability inventory: The skill identifies refactoring and tool configuration as triggers, which involve the capabilities to write files and execute environment-setup commands.
- Sanitization: No sanitization or validation methods are specified for the untrusted code content that the agent is expected to process.
Audit Metadata