refactor
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes output from external tools such as DeepSource, ESLint, and cargo clippy to define the refactoring scope.
- Ingestion points: The workflow parses findings from third-party static analysis tools in Path B (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters to separate external tool data from agent instructions, which could allow crafted tool output to influence agent behavior.
- Capability inventory: The agent has capabilities to read/write files and execute shell commands across all phases of the refactoring process.
- Sanitization: There are no explicit instructions to sanitize or validate the external content before it is interpolated into the agent's context.
- [COMMAND_EXECUTION]: The skill instructs the agent to run several command-line tools for linting, build checks, and testing (e.g., 'cargo clippy', 'golangci-lint', 'npx eslint', 'ruff'). These are standard development operations and are executed locally within the project context.
Audit Metadata