code-refactoring
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes legacy codebases, which serves as an ingestion point for untrusted data that could contain malicious instructions.
- Ingestion points: The skill operates on legacy source code, framework configurations, and database schemas provided by the user or fetched from the local environment (SKILL.md).
- Boundary markers: The instructions lack specific delimiters or directives to the agent to ignore instructions embedded within the code being refactored (e.g., hidden in comments or strings).
- Capability inventory: The skill's primary function involves code analysis and modification, which requires the agent to use file-read and file-write tools on the local system.
- Sanitization: There is no evidence of sanitization or safety filtering applied to the legacy code before the agent processes and refactors it.
Audit Metadata