simplify

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes unified diffs and working-tree changes that may contain untrusted content from the codebase or external contributors.
  • Ingestion points: The skill ingests data from git diff operations (Phase 0).
  • Boundary markers: There are no explicit delimiters or instructions provided to the sub-agents to ignore instructions embedded within the code changes being reviewed.
  • Capability inventory: The skill is authorized to directly apply fixes to the worktree (Phase 2), granting it write access to the repository based on its analysis.
  • Sanitization: The skill does not sanitize the diff content before passing it to the cleanup agents.
  • [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local environment and external guarding systems.
  • Executes standard Git commands (git diff, git rev-parse) to gather context and identify project boundaries.
  • Uses echo commands to signal bypasses (simplify-guard:bypass) or completion status (simplify-guard:complete) to an external guard mechanism, which is a standard integration pattern for this workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 10:24 PM