doc-refactor
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks because it processes untrusted data from local documents and performs actions based on that content.
- Ingestion points: The skill reads the contents of files specified by the
$ARGUMENTSvariable inSKILL.md. - Boundary markers: The subagent dispatch prompt lacks explicit boundary markers or instructions to ignore embedded commands within the refactored text.
- Capability inventory: The skill utilizes
Read,Grep,Glob, andEdittools, allowing it to modify the file system. - Sanitization: There is no evidence of sanitization or validation of the document content before it is processed by the agent.
Audit Metadata