expert-code-refactoring
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and processing external code and tests, which creates a potential surface for indirect prompt injection where instructions could be embedded in the code being refactored.
- Ingestion points: The agent is instructed to "Read the file and its associated tests" during the Analyze Context phase (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or provide warnings for the agent to ignore instructions found within the data it processes.
- Capability inventory: The skill requires file read and write access to perform analysis and apply code transformations.
- Sanitization: There is no specific instruction provided to sanitize or validate the code content for embedded natural language instructions.
Audit Metadata