legacy-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and process untrusted source code provided by users. While it provides a structured workflow, it lacks specific instructions for the agent to sanitize or delimit this untrusted content. Ingestion points: The agent receives legacy code snippets or entire modules for review as directed in SKILL.md and README.md. Boundary markers: The instructions do not define specific delimiters or 'ignore embedded instructions' warnings for the code being processed. Capability inventory: The workflow involves writing new tests and performing mutation testing, which requires file system access and the ability to execute code in a shell environment. Sanitization: There are no instructions for sanitizing or validating the code before it is analyzed or used to generate tests.
- [NO_CODE]: The skill consists entirely of markdown instructions and metadata. It does not ship with any executable scripts or binary files, which significantly reduces the direct attack surface.
Audit Metadata