refactor

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: Analysis of the refactoring instructions and strategy guides revealed no malicious patterns or security vulnerabilities. The skill is designed to assist with software maintenance and architecture improvements.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as its primary function involves reading and processing untrusted source code. 1. Ingestion points: The skill utilizes Read, Grep, and Glob tools to ingest code from the filesystem, as specified in the allowed-tools section of SKILL.md. 2. Boundary markers: No delimiters or specific instructions to disregard embedded commands within the processed code are provided in the guide. 3. Capability inventory: The skill environment allows for Write operations and Bash command execution. 4. Sanitization: There is no evidence of sanitization, escaping, or validation of the ingested code content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 09:14 PM
Security Audit — agent-trust-hub — refactor