clarify
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions define a multi-pass workflow for analyzing codebases and plans. All operations described are standard for development tools, such as inspecting git history and making granular code edits. No malicious code or obfuscation was detected.
- [PROMPT_INJECTION]: The skill processes untrusted external data (source code, git diffs, and project plans) which presents an attack surface for indirect prompt injection.
- Ingestion points: Reads codebase files, uncommitted diffs, and work items as specified in SKILL.md (Pass 1 and 2).
- Boundary markers: The instructions do not define explicit boundary markers to isolate analyzed content.
- Capability inventory: The skill is authorized to perform file edits and create issues based on findings as described in SKILL.md (Pass 7).
- Sanitization: No specific sanitization or filtering of input data is mentioned in the instructions.
Audit Metadata