refactoring-safely
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill involves processing external source code which can serve as a vector for indirect prompt injection. * Ingestion points: Source code files, modules, and application flows identified for refactoring (SKILL.md). * Boundary markers: There are no explicit markers or instructions to isolate the code being processed from the agent's logic. * Capability inventory: The instructions include modifying files and executing commands to run tests (SKILL.md). * Sanitization: No sanitization or validation of the input code is specified.
- [COMMAND_EXECUTION]: The skill requires the agent to execute local test commands to ensure observable behavior remains unchanged.
- [NO_CODE]: This skill consists of markdown instructions only and does not contain any scripts, binaries, or other executable files.
Audit Metadata