ln-512-tech-debt-cleaner
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) by processing audit findings from external files to drive code modifications and command execution.
- Ingestion points: Findings are loaded from
docs/project/codebase_audit.mdandln-511code quality output as specified in the Workflow (Step 1). - Boundary markers: The instructions do not define explicit delimiters or 'ignore embedded instructions' warnings for the data ingested from the audit reports.
- Capability inventory: The skill utilizes powerful tools including
mcp__hex-line__edit_file,mcp__hex-line__bulk_replace, and theBashtool across its workflow and runtime scripts. - Sanitization: The skill mitigates risk through a mandatory 90% confidence threshold (Step 3), semantic reference checks via
hex-graph, and build verification (lint and typecheck) after each modification (Step 4). - [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute linting, type-checking, and build commands. These commands are dynamically discovered at runtime from the project's own configuration files (such aspackage.jsonorpyproject.toml) or documentation, following the hierarchy defined inreferences/ci_tool_detection.md.
Audit Metadata