refactor-expert
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured guidelines and documentation templates for incremental code refactoring. No malicious patterns, obfuscation, or unauthorized access attempts were identified.
- [NO_CODE]: No executable code, scripts, or binaries are provided with this skill; it consists entirely of instructional documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing external code files which serves as an entry point for untrusted data.
- Ingestion points: Commands such as
refactor:analyze <file>andrefactor:plan <file>take user-provided file paths as input for processing. - Boundary markers: No specific delimiters or instructions for the agent to treat the code content as untrusted data are present.
- Capability inventory: The skill is limited to generating documentation and logs within the
.claude/logs/refactors/project directory. It does not possess network, credential access, or arbitrary command execution capabilities. - Sanitization: The instructions do not define specific sanitization or filtering logic for the code content being analyzed.
Audit Metadata