simplify-code
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository that can influence its behavior.
- Ingestion points: Reads git diff output and project documentation like AGENTS.md in Step 1.
- Boundary markers: The skill lacks explicit delimiters or instructions to ignore embedded prompts in the source files.
- Capability inventory: Step 4 performs file edits and Step 5 executes shell commands for validation (e.g., tests, linters).
- Sanitization: There is no logic to sanitize or filter potential instructions within the read files.
Audit Metadata