superior-lean

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify existing source code, creating a surface for indirect prompt injection if the processed code contains malicious instructions.
  • Ingestion points: The skill ingests project source code, including flow tracing and caller inspection as described in SKILL.md.
  • Boundary markers: The instructions contain explicit safeguards under the 'Complexity that must remain' section, directing the agent to preserve security, privacy, and authorization controls.
  • Capability inventory: The skill provides instructions to modify and delete code within the repository to reduce implementation complexity.
  • Sanitization: There are no technical sanitization or filtering mechanisms defined for the external content processed by the skill.
  • [NO_CODE]: The skill does not contain any executable scripts, binaries, or automated installation commands; it consists entirely of natural language instructions and a license file.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 02:37 PM