code-simplifier
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts on code provided as input, which represents an attack surface for indirect prompt injection if the source code contains malicious instructions intended to influence the agent's behavior.
- Ingestion points: The skill processes code provided in the agent's context (SKILL.md).
- Boundary markers: The instructions lack explicit directives for the agent to use delimiters or to disregard instructions found within the code blocks it refines.
- Capability inventory: The skill defines logic for code transformation but does not include scripts for file system modification, network communication, or arbitrary command execution.
- Sanitization: No sanitization or validation steps are included for the input code before it is processed.
Audit Metadata