simplify-code
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to determine scope via
git diffand to verify changes using the project's existing linter and test runners. These operations are standard for development agents and are restricted to the local environment.\n- [PROMPT_INJECTION]: The skill presents an 'Indirect Prompt Injection' surface by processing code diffs which could contain malicious comments or instructions. \n - Ingestion points: Code diffs and file contents read from the local repository in
SKILL.md.\n - Boundary markers: No explicit delimiters are used to wrap diff content.\n
- Capability inventory: The skill can modify local files and execute shell commands (linting and testing).\n
- Sanitization: The skill relies on model reasoning to 'preserve behavior' and the local test suite for validation. Given its intended use as a code maintenance tool, the risk is categorized as low.
Audit Metadata