code-compaction
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill provides instructions to use standard development utilities such as
git,awk, andgrepfor measuring code metrics (e.g., Lines of Code and comment-to-code ratios). These tools are used for their intended analytical purposes within the local repository environment. - Local Repository Management: The skill includes workflows for creating local branches (
git checkout -b) to prototype refactoring proposals. This is a common practice for evaluating code changes in isolation before they are merged. - Indirect Prompt Injection Surface: The skill processes external data in the form of code diffs and repository files. While these files are analyzed by the agent, the skill's design—incorporating multiple adversarial reviewer models and consolidation steps—serves as a functional check against unexpected outputs.
- Local Configuration Usage: The skill refers to a local style guide at
.github/instructions/NoBloat.instructions.md, which is a standard pattern for repository-specific configuration and does not involve external network calls.
Audit Metadata