woostack-simplify
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill provides instructions for refactoring code and references local documentation and informational resources.
- [INDIRECT_PROMPT_INJECTION]: The skill inherently processes repository content (source files, diffs, tests) to perform its function, which is a common attack surface for indirect prompt injection. However, this is consistent with its primary purpose and no malicious exploitation patterns were found. Ingestion points include code files and workspace state; capabilities include reading and editing local files; no explicit sanitization or boundary markers for untrusted code are specified in the instructions. The risk is considered acceptable given the primary function of the skill.
Audit Metadata