cleanup-legacy

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill's primary function is code maintenance, utilizing standard search patterns to find deprecated markers and verify the absence of callers before proceeding with deletion.
  • [COMMAND_EXECUTION]: Executes common build and test tools (e.g., bun, pytest, go test, cargo test) to verify project integrity after cleanup. These operations are standard for development workflows and are used here to ensure that deletions do not break the build.
  • [EXTERNAL_DOWNLOADS]: Utilizes the knip utility via bunx to surface newly-orphaned exports. knip is a well-known tool for unused code analysis in the JavaScript ecosystem.
  • [SAFE]: Accesses project configuration and environment files (e.g., .env, config/*.json) specifically to evaluate whether feature flags have been fully rolled out. This local read access is used for logic branching and does not involve exfiltration to external domains.
  • [SAFE]: The skill incorporates a robust set of constraints (the 'NEVER' section) and requires verification through existing test suites, reducing the risk of indirect prompt injection or logic errors leading to the removal of critical code. Ingestion points include source code and configuration files, and while explicit boundary markers are absent, the logic is gated by mandatory safety checks and automated verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 04:06 PM
Security Audit — agent-trust-hub — cleanup-legacy