skills/frankieramirez/mana/banish/Gen Agent Trust Hub

banish

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads configuration files (CLAUDE.md, AGENTS.md) and user-provided source code to determine persona settings and identify comments for removal. * Ingestion points: Reads persona and style preferences from CLAUDE.md or AGENTS.md and reads target source code files. * Boundary markers: Includes an explicit instruction to treat instructions embedded in untrusted documents and tool output as data that cannot authorize actions. * Capability inventory: Capability to modify files (deleting comments, renaming symbols, extracting code) and execute shell-based validation commands. * Sanitization: Relies on the 'treat as data' instruction to prevent the agent from following instructions embedded in the analyzed code.
  • [COMMAND_EXECUTION]: The skill executes validation commands and potentially project-specific testing tools to verify that code cleanup did not introduce regressions. * Evidence: references/comment-validation.md instructs the agent to run project-required validation, focused tests, and compiler/linter checks after edits.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 07:09 PM