component-refactoring
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate developer tool designed for code maintenance. The commands and patterns described, such as using pnpm for complexity analysis and immer for state management, are standard practices within the Dify project context.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and process React component source code, which could theoretically contain malicious instructions designed to bypass agent safety filters.
- Ingestion points: React component files located within the project's web/ directory.
- Boundary markers: None specified; the skill instructions do not provide delimiters for separating untrusted code from instructions.
- Capability inventory: The skill uses shell execution for analysis and filesystem operations for code refactoring.
- Sanitization: No explicit sanitization or validation of the input code is defined in the skill.
Audit Metadata