refactoring-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it is designed to ingest and analyze untrusted source code.
- Ingestion points: The 'Analysis' stage (Phase 1) described in SKILL.md ingest 'Target code' for smell detection and risk assessment.
- Boundary markers: The workflow lacks explicit delimiters or instructions for the agent to ignore instructions embedded within the processed code's comments or strings.
- Capability inventory: The skill uses powerful tools including cross-file-refactor, test-generator, and code-coverage, which allow for file modification and code execution.
- Sanitization: There is no documented process for sanitizing input code to strip out potential agent instructions.
Audit Metadata