refactor-skill
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvx skilllint@latestto perform validation during the refactoring process. This command fetches theskilllintpackage from a remote registry at runtime.\n- [REMOTE_CODE_EXECUTION]: By using theuvxtool, the skill executes code downloaded from an external source (theskilllintpackage). This execution is used for the primary purpose of validating skill structure and token counts.\n- [COMMAND_EXECUTION]: The workflow involves executing local shell commands includinggrepto search for references anduvxto run the linter.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external files (the skills to be refactored) provided at the$ARGUMENTSpath. This creates a surface for indirect prompt injection if the processed content contains instructions that influence the agent's refactoring logic. The skill lacks explicit sanitization or boundary markers for this external content.\n - Ingestion points: The contents of the skill directory provided via
$ARGUMENTSin the Phase 1 Domain Analysis step.\n - Boundary markers: None identified in the workflow instructions.\n
- Capability inventory: File writing (SKILL.md), file moving (references), and command execution (uvx, grep).\n
- Sanitization: No explicit sanitization or escaping of external skill content is described.
Audit Metadata