request-refactor-plan
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for a developer-centric workflow involving user interviews, codebase exploration, and documentation creation.
- [PROMPT_INJECTION]: The skill is designed to ingest untrusted data from user input and repository content to generate refactor plans. While this represents a surface for indirect prompt injection, it is central to the skill's purpose.
- Ingestion points: Step 1 (User interviews) and Step 2 (Repository exploration).
- Boundary markers: No explicit delimiters are defined to separate user content from system instructions in the issue template.
- Capability inventory: The agent uses filesystem tools for exploration and the GitHub CLI for issue creation.
- Sanitization: No specific filtering or validation of user-provided content is implemented.
Audit Metadata