repo-cleanup
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs file system and repository management using commands like
rm -rfto clear build artifacts andgit push origin --deleteto remove remote branches as part of the archival process. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto fetch and run several development utilities from the npm registry, includingts-prune,depcheck,unimported,license-checker, andwebpack-bundle-analyzer. - [REMOTE_CODE_EXECUTION]: Runtime execution of tools is facilitated via
npxfor analysis tasks. - [CREDENTIALS_UNSAFE]: The cleanup routines include patterns for identifying and moving environment-related files such as
.env.backupand.env.old. - [DYNAMIC_EXECUTION]: The skill demonstrates the use of
findandsedto automate code refactoring and import updates during test migrations. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent reads codebase documentation and source files (via
ReadandGlob) to categorize them for cleanup or archival. - Boundary markers: None identified in the instruction templates.
- Capability inventory: The skill possesses capabilities for file removal (
rm), movement (mv), and external tool execution (npx). - Sanitization: No specific content filtering is mentioned before the agent makes cleanup decisions based on file content.
Audit Metadata