clean-code
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists solely of markdown instructions, tables, and code snippets demonstrating clean code principles. No network operations, file system modifications, or credential harvesting patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted source code provided by users, which is a standard surface for indirect prompt injection.
- Ingestion points: Phase 1 (Analyze Current Code) requires the agent to read and understand code in its full context (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the code being analyzed, relying on the underlying agent platform for context isolation.
- Capability inventory: The skill provides logic for analysis and refactoring patterns but does not invoke subprocesses, network tools, or file-writing tools within its own instructions.
- Sanitization: No specific input sanitization or validation logic is defined within the skill content.
Audit Metadata