optimize-agent-instructions
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform a directory listing (ls) to detect existing instruction files such asCLAUDE.md,GEMINI.md, and.github/copilot-instructions.md. This is a standard discovery operation to determine the project's environment. - [EXTERNAL_DOWNLOADS]: References a public GitHub repository (
github.com/forrestchang/andrej-karpathy-skills) as the source for the behavioral principles it implements. This reference is used for attribution and documentation and does not involve the automated execution of remote code. - [PROMPT_INJECTION]: The skill analyzes and rewrites existing instruction files which may contain untrusted data from external repository contributors, representing an indirect prompt injection surface.
- Ingestion points: Reads project-level documentation files (
CLAUDE.md,GEMINI.md, etc.). - Boundary markers: While it does not use specific delimiters when reading input, it enforces a strict "Canonical Structure" during the rewrite phase.
- Capability inventory: The skill possesses
Read,Write, andBashcapabilities to manage repository configuration. - Sanitization: Implements a structured "Quality Checklist" designed to identify and remove "stale artifacts" or "foreign rules" from other projects, which serves to sanitize the resulting instructions.
Audit Metadata