safe-refactor
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves processing source code, which serves as an ingestion point for untrusted data.
- Ingestion points: The skill reads JavaScript, TypeScript, and Python source code files during the baseline analysis and planning phases (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or directives to ignore instructions that may be hidden in code comments or string literals.
- Capability inventory: The agent is authorized to read and modify the local file system and execute development tools including tsc, eslint, mypy, pyright, and ruff (SKILL.md).
- Sanitization: No sanitization, filtering, or validation of the ingested code content is specified before the agent processes it for refactoring.
Audit Metadata