remove-deadcode
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various development commands to analyze and modify the codebase.
- Runs
bunx tsc --noEmit --noUnusedLocals --noUnusedParametersto identify candidates for removal. - Executes
gitcommands (git add,git commit,git checkout) to manage changes and revert in case of failures. - Uses
rmto delete files identified as orphaned. - Runs project-specific scripts like
bun run typecheck,bun test, andbun run buildfor final verification. - [INDIRECT_PROMPT_INJECTION]: The skill processes local project source code from the
src/directory to identify unused symbols and files. - Ingestion points: The skill reads file paths and contents within the
src/directory through subagents and shell commands. - Boundary markers: The skill establishes strict constraints (e.g.,
LSP is law,false-positive-guards) to prevent accidental removal of entry points or public APIs. - Capability inventory: The agent has the capability to delete files, modify source code, and commit changes to the Git repository.
- Sanitization: All removal candidates are cross-verified using
LspFindReferences(includeDeclaration=false)and compiler-level checks (tsc) before any action is taken. This multi-layered verification significantly reduces the risk of malicious or accidental code deletion.
Audit Metadata