simplify-code
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted repository data, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill reads output from
git diffand repository-level instruction files likeAGENTS.md. - Boundary markers: The instructions lack explicit delimiters or instructions to the sub-agents to ignore embedded commands within the diffs.
- Capability inventory: The skill has the ability to write to files ('safe-fixes' mode) and execute shell commands for validation (e.g., targeted tests, typecheck, or lint checks).
- Sanitization: No sanitization or escaping of external content is performed before interpolation into prompts.
Audit Metadata