simplify-code
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
git diffand related commands to identify the code changes that require review. These operations are standard for development tools and do not pose a security risk in this context. - [DATA_EXPOSURE]: The skill reads repository data including file paths, branches, and diffs to perform its analysis. The access is limited to the local codebase, and there is no evidence of sensitive file access (e.g., credentials) or external exfiltration.
- [PROMPT_INJECTION]: The skill processes untrusted code content from the repository, which constitutes an indirect prompt injection surface. However, the skill instructions explicitly enforce behavior-preserving cleanup and require verification via tests and manual review, which effectively mitigates the impact of potential malicious instructions hidden in code.
- Ingestion points: Code changes are read from git diffs, file paths, branches, or PRs (SKILL.md, Workflow Step 1).
- Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the ingested code.
- Capability inventory: The skill can modify files, run tests, and execute linters/typecheckers as specified in the Workflow (Steps 4 and 5).
- Sanitization: No sanitization or escaping of the ingested code content is mentioned.
Audit Metadata