exhaustive-code-slimmer
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/exhaustive_shrink.pyexecutes shell commands provided as the 'oracle' to verify code changes. - Evidence: In
scripts/exhaustive_shrink.py, therun_oraclefunction usessubprocess.run(command, shell=True)to execute the behavior-preservation command specified in the--oracleargument. - [INDIRECT_PROMPT_INJECTION]: The skill processes entire external repositories, which creates a potential surface for instructions embedded in data (such as code comments or documentation) to influence the agent.
- Ingestion points:
scripts/code_slim_audit.pyandscripts/architecture_dx_scan.pyingest all code and text files within a target repository for analysis. - Boundary markers: The skill instructions establish behavior preservation and user-approval gates as logical boundaries, though it lacks explicit technical delimiters for raw file content.
- Capability inventory: The skill has the capability to write to the filesystem, delete files, and execute shell commands via the oracle script.
- Sanitization:
scripts/exhaustive_shrink.pyincludes anassert_safe_relpathfunction that validates candidate paths to prevent directory traversal attacks (e.g., preventing the use of..to access files outside the repository root).
Audit Metadata