component-refactoring
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process, analyze, and refactor existing React components within the
src/frontend/directory. This creates a surface for indirect prompt injection where malicious instructions embedded in source code could influence the agent's behavior. - Ingestion points: The agent reads and processes component files (e.g.,
src/frontend/src/CustomNodes/GenericNode/generic-node.tsx) to perform complexity assessments and refactoring. - Boundary markers: No specific delimiters or instructions to ignore embedded code comments/instructions are provided in the skill instructions.
- Capability inventory: The skill utilizes shell commands (
npm run lint,npm run type-check,npm test) which execute project-defined scripts that could be subverted by malicious code in the components or dependencies. - Sanitization: There is no evidence of sanitization or filtering of the component content before the agent processes it for refactoring recommendations.
Audit Metadata