clean-code
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and contains no scripts or executables. It directs the agent to perform refactoring tasks using existing tools in the environment. No unauthorized file access, network exfiltration, or credential exposure was identified.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes external source code and version control diffs.
- Ingestion points: The instructions in SKILL.md direct the agent to inspect staged, unstaged, and untracked files, as well as version-control diffs.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts within the ingested code.
- Capability inventory: The skill instructs the agent to modify source files and execute environment tools such as formatters, linters, and tests.
- Sanitization: There is no mention of sanitizing or escaping the content of the files being processed.
Audit Metadata