component-refactoring
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes well-established software engineering practices for React development, specifically tailored for the Dify project's structure.
- [COMMAND_EXECUTION]: The skill uses project-specific pnpm scripts for static code analysis and refactoring assistance. These tools are legitimate components of the development environment.
- [INDIRECT_PROMPT_INJECTION]: The refactoring workflow involves processing local source code to generate prompts, which could theoretically contain malicious instructions. However, this is a standard risk for code-processing tools and is considered safe within the intended development context.
- Ingestion points: Component source code files at processed via pnpm commands.
- Boundary markers: None explicitly mentioned in the instructions for the generated prompts.
- Capability inventory: Shell command execution (pnpm) for analysis and prompt generation as documented in SKILL.md.
- Sanitization: No sanitization of input source code is documented.
Audit Metadata