refactor
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted source code which could contain indirect prompt injections. However, it explicitly mitigates this risk by instructing the agent to treat all code content strictly as data. Ingestion points: Source files and code quality reports. Boundary markers: Rule to treat code as data, not instructions. Capability inventory: File modification and test execution via Bash. Sanitization: Relies on instruction following and user review of the plan.
- [SAFE]: The skill requires explicit user confirmation of the refactoring plan before any modifications are made to files.
- [SAFE]: Shell command usage is restricted to running the project's existing test suite, preventing arbitrary command execution.
- [SAFE]: No hardcoded credentials, unauthorized network connections, or persistence mechanisms were found in the skill logic.
Audit Metadata