clean-code-javascript
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow requires the agent to read and interpret data from the local development environment, such as
package.json, source code, and test outputs. Because this data is external and untrusted, it could contain malicious instructions designed to manipulate the agent's behavior during the refactoring process. - Ingestion points:
SKILL.mdworkflow steps 2 and 3, which involve inspecting project configuration and establishing behavior from existing code and tests. - Boundary markers: The instructions do not define specific delimiters or warnings to prevent the agent from following instructions embedded within the codebase or project files.
- Capability inventory: The skill instructs the agent to perform file writes (refactoring) and execute shell commands for linting, testing, and building the project.
- Sanitization: No sanitization or validation of the processed code or configuration content is defined.
Audit Metadata