refactoring-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted source code provided by users for refactoring purposes.\n
- Ingestion points: User-provided code snippets or legacy codebases targeted for refactoring (SKILL.md).\n
- Boundary markers: Absent; there are no instructions to use specific delimiters or to ignore instructions embedded within the processed code.\n
- Capability inventory: The skill framework includes reading/writing code and running automated tests, which may involve shell execution (references/refactoring-workflow.md).\n
- Sanitization: Absent; no sanitization or filtering logic is specified for the ingested content.\n- [PROMPT_INJECTION]: The skill contains inconsistent author metadata, which could be misleading.\n
- Evidence: The YAML frontmatter in SKILL.md lists the author as 'wondelai', which contradicts the skill author context provided as 'emmavelazquez'. Additionally, affiliate tags in documentation links reference 'wondelai'.\n- [EXTERNAL_DOWNLOADS]: The skill provides links to external documentation and reference books hosted on Amazon.\n
- Evidence: URLs for 'Refactoring', 'Working Effectively with Legacy Code', and 'Clean Code' books include affiliate tags and point to amazon.com.
Audit Metadata