impeccable-extract
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted source code to identify UI patterns. 1. Ingestion point: Local source code files located via search in the 'Discover' phase. 2. Boundary markers: Absent; no instructions are provided to the agent to distinguish between code and potential instructions within comments or strings. 3. Capability inventory: File system read (searching) and write (creating components, deleting code). 4. Sanitization: Absent; the skill does not specify validation or filtering of the extracted content.
- [COMMAND_EXECUTION]: The skill instructs the agent to perform file system operations including searching for patterns (e.g., 'grep') and modifying the project structure (creating and deleting files). These operations are restricted to the project environment and support the skill's intended functionality of code refactoring.
Audit Metadata