refactor-code
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code and executes test suites, creating a surface where malicious code in the user's project could execute commands or influence agent behavior. * Ingestion points: Reads Rails models, controllers, and specification files during the refactoring process (e.g.,
spec/requests/orders_spec.rbmentioned inSKILL.md). * Boundary markers: The skill does not define specific delimiters or instructions to isolate the agent from potentially malicious code snippets in the files it modifies. * Capability inventory: The skill usesbundle exec rspecandbundle exec rubocopto execute code and analyze the project state. * Sanitization: No specific sanitization or validation of the ingested code is described. - [COMMAND_EXECUTION]: The skill instructions require the agent to execute shell commands to run test suites and linters as part of its mandatory verification protocol. * Evidence: Documented use of
bundle exec rspecandbundle exec rubocopthroughoutSKILL.mdandassets/complete_example.mdto verify the state of the code after structural changes.
Audit Metadata