clean-code-refactoring
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted source code from the user through the
$ARGUMENTSvariable. This creates a potential attack surface where malicious instructions embedded within the source code could attempt to influence the agent's behavior during the refactoring process. - Ingestion points: The
$ARGUMENTSplaceholder inSKILL.mdis the primary entry point for untrusted data. - Boundary markers: The instructions do not define explicit delimiters or 'ignore' directives to help the agent distinguish between its task instructions and the data being processed.
- Capability inventory: The skill is focused on text-based code analysis and generation. While no specific tool access is requested in the frontmatter, the lack of restrictions means the agent may have access to general-purpose system tools.
- Sanitization: No input validation or sanitization routines are specified for the provided code content.
- [EXTERNAL_DOWNLOADS]: The skill's documentation references several well-known developer tools and services, including GitHub Actions for CI/CD (e.g.,
actions/checkout,github/copilot-autofix), static analysis tools (SonarQube, Semgrep, Ruff), and automated review services (CodeRabbit, Codium AI). These references are provided as integration examples and point to established, trusted industry providers.
Audit Metadata