codebase-improver
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs codebase analysis and refactoring by executing multiple shell commands and development tools including
find,grep,git,ruff,vulture, andtscas specified inSKILL.mdandreferences/audit-catalog.md.- [EXTERNAL_DOWNLOADS]: The skill usesnpx jscpdin its audit catalog to detect code duplication, which facilitates the download and execution of thejscpdpackage from the official npm registry.- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes all files within a repository, creating a potential vector for indirect prompt injection if the audited code contains malicious instructions. - Ingestion points: Audits entire directory structures and file contents across the repository (
SKILL.md,references/audit-worker.md). - Boundary markers: The skill does not mandate explicit delimiters for all data ingestion, though snapshots via
repomixare supported. - Capability inventory: The agent possesses broad capabilities including shell command execution, file system writes, and git manipulation (
SKILL.md,references/quality-loop.md). - Sanitization: The risk is mitigated by rigorous human-in-the-loop checkpoints at every stage (Checkpoints A-E) and specific constraints on subagent outputs that require evidence citing
path:line.
Audit Metadata