refactor
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify source code provided by the user. This creates a vulnerability where instructions hidden in comments or strings within the code being refactored could attempt to override the agent's behavior.
- Ingestion points:
SKILL.md(Step 1) explicitly instructs the agent to "Read the code in scope and its callers." - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious embedded content within the source files.
- Capability inventory: The skill involves writing to the filesystem (
.refactor/directory and code modifications) and executing commands via$tddand$code-reviewtools, as well as arbitrary test commands mentioned in Step 5. - Sanitization: There is no mention of sanitizing or validating the input code to filter out natural language instructions before the agent processes it.
Audit Metadata