improve-agents-md
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Unix utilities including
lsto identify symlinks,cpto create file snapshots in/tmp/,lnto synchronize AGENTS.md and CLAUDE.md, andwcandawkto generate text metrics. These operations are confined to the local project environment and are consistent with the skill's primary purpose of file optimization. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-level instruction files which represent an untrusted data ingestion surface. This risk is mitigated through a structured process where the model is directed to categorize rather than execute file content. The skill incorporates multiple human-in-the-loop checkpoints via
AskUserQuestionat decision points for deletions and rewrites, ensuring that any malicious instructions within the audited files cannot be autonomously executed or persisted without user consent.
Audit Metadata