code-simplification
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and refactor code provided by users or external sources, which introduces an inherent attack surface for indirect prompt injection.
- Ingestion points: The agent reads source code files and snippets for simplification as instructed in SKILL.md.
- Boundary markers: The instructions do not define explicit delimiters or instructions for the agent to ignore prompt injection attempts embedded within the code being processed.
- Capability inventory: The skill is intended for use with coding agents that typically have powerful capabilities, including file system access and shell command execution.
- Sanitization: There are no documented procedures in the skill for sanitizing input or validating that the refactored code does not contain malicious instructions aimed at the agent itself.
Audit Metadata