remove-deadcode

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various development commands to analyze and modify the codebase.
  • Runs bunx tsc --noEmit --noUnusedLocals --noUnusedParameters to identify candidates for removal.
  • Executes git commands (git add, git commit, git checkout) to manage changes and revert in case of failures.
  • Uses rm to delete files identified as orphaned.
  • Runs project-specific scripts like bun run typecheck, bun test, and bun run build for final verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes local project source code from the src/ directory to identify unused symbols and files.
  • Ingestion points: The skill reads file paths and contents within the src/ directory through subagents and shell commands.
  • Boundary markers: The skill establishes strict constraints (e.g., LSP is law, false-positive-guards) to prevent accidental removal of entry points or public APIs.
  • Capability inventory: The agent has the capability to delete files, modify source code, and commit changes to the Git repository.
  • Sanitization: All removal candidates are cross-verified using LspFindReferences(includeDeclaration=false) and compiler-level checks (tsc) before any action is taken. This multi-layered verification significantly reduces the risk of malicious or accidental code deletion.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 06:02 AM