simplify
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes unified diffs and working-tree changes that may contain untrusted content from the codebase or external contributors.
- Ingestion points: The skill ingests data from
git diffoperations (Phase 0). - Boundary markers: There are no explicit delimiters or instructions provided to the sub-agents to ignore instructions embedded within the code changes being reviewed.
- Capability inventory: The skill is authorized to directly apply fixes to the worktree (Phase 2), granting it write access to the repository based on its analysis.
- Sanitization: The skill does not sanitize the diff content before passing it to the cleanup agents.
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local environment and external guarding systems.
- Executes standard Git commands (
git diff,git rev-parse) to gather context and identify project boundaries. - Uses
echocommands to signal bypasses (simplify-guard:bypass) or completion status (simplify-guard:complete) to an external guard mechanism, which is a standard integration pattern for this workflow.
Audit Metadata