remove-dumb-comments
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git blameto determine the relative age of code comments. It also invokes project-defined linting and typechecking utilities to ensure code correctness following any modifications. - [PROMPT_INJECTION]: The skill ingests untrusted data from source code comments, creating a surface for indirect prompt injection.
- Ingestion points: Project source code files (SKILL.md).
- Boundary markers: None defined for isolating comment text from the agent's instructional context.
- Capability inventory: File modification (line removal),
git blameexecution, and project-specific linting/typechecking execution. - Sanitization: No validation or sanitization of comment text is performed before analysis.
Audit Metadata