csharp-refactoring
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill's primary function involves reading and processing source code from the repository. This represents a potential surface for indirect prompt injection, where instructions hidden within code or comments could attempt to influence the agent's behavior.
- Ingestion points: Source files and repository context are read from the workspace during analysis and refactoring (
SKILL.md). - Boundary markers: There are no explicit markers or instructions to treat ingested code as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill is capable of performing file edits and executing shell commands such as
dotnet buildanddotnet test(SKILL.md). - Sanitization: The skill does not describe any sanitization or validation processes for the code it processes.
Audit Metadata