code-simplifier

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions specify using shell commands, notably git diff, to identify recently modified code sections within the repository.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes code from the local environment which could be influenced by external contributors.
  • Ingestion points: Modified code files and diff outputs identified via git diff (SKILL.md).
  • Boundary markers: The instructions do not define delimiters or provide warnings to ignore embedded instructions within the ingested code.
  • Capability inventory: The skill has permissions to read and write project files and execute local shell commands for diffing.
  • Sanitization: There is no evidence of content sanitization or validation of the code snippets before they are analyzed and processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 09:48 AM
Security Audit — agent-trust-hub — code-simplifier