request-refactor-plan
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from user interviews and repository exploration to generate external GitHub issues, creating an indirect prompt injection surface.
- Ingestion points: User descriptions (step 1), implementation interviews (step 4), and repository exploration (step 2 and 6) in
SKILL.md. - Boundary markers: Absent; the skill does not define specific delimiters or instructions to ignore embedded commands within the codebase or user input.
- Capability inventory: The skill interacts with external tools to create GitHub issues (Step 8).
- Sanitization: Absent; no explicit validation or escaping of ingested data is mentioned before formatting into the refactor plan template.
Audit Metadata