cleanup-legacy
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill's primary function is code maintenance, utilizing standard search patterns to find deprecated markers and verify the absence of callers before proceeding with deletion.
- [COMMAND_EXECUTION]: Executes common build and test tools (e.g.,
bun,pytest,go test,cargo test) to verify project integrity after cleanup. These operations are standard for development workflows and are used here to ensure that deletions do not break the build. - [EXTERNAL_DOWNLOADS]: Utilizes the
kniputility viabunxto surface newly-orphaned exports.knipis a well-known tool for unused code analysis in the JavaScript ecosystem. - [SAFE]: Accesses project configuration and environment files (e.g.,
.env,config/*.json) specifically to evaluate whether feature flags have been fully rolled out. This local read access is used for logic branching and does not involve exfiltration to external domains. - [SAFE]: The skill incorporates a robust set of constraints (the 'NEVER' section) and requires verification through existing test suites, reducing the risk of indirect prompt injection or logic errors leading to the removal of critical code. Ingestion points include source code and configuration files, and while explicit boundary markers are absent, the logic is gated by mandatory safety checks and automated verification.
Audit Metadata