dev-loop-refactor-guide
Warn
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Multiple reference files (e.g.,
references/architecture-patterns.md) contain code snippets demonstrating network operations using theaiohttplibrary. While these are provided as technical examples, they establish a pattern for fetching data from external URLs. - [COMMAND_EXECUTION]: The skill provides a functional Python class
PythonSmellDetectorinSKILL.mdthat uses theastmodule to analyze source code. While the provided implementation is benign, it demonstrates the skill's intended purpose of programmatically analyzing and processing arbitrary code blocks. - [PROMPT_INJECTION]: The skill includes 8 reference files (such as
references/security-best-practices.mdandreferences/state-management.md) that each contain 150 sections of nearly identical technical specifications and code. This massive volume of redundant data (approx. 1,200 sections total) constitutes a 'context bloating' technique. This can be used as an indirect injection vector to displace safety instructions in the agent's context window or to hide specific malicious instructions within the vast amount of noise.
Audit Metadata