skills/snappedly/skills/code-cleanup/Gen Agent Trust Hub

code-cleanup

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted project data including code diffs, CI configs, and internal documentation without using delimiters or sanitization. This establishes a vulnerability surface where malicious code changes could attempt to override agent instructions. Ingestion points: Code files, git diffs, and configuration files. Boundary markers: Absent. Capability inventory: Shell command execution for tests and linter, file writing for evidence, and source code modification. Sanitization: None provided.
  • [COMMAND_EXECUTION]: The skill executes arbitrary project-specific commands for linting and testing as specified in the repository's configuration.
  • [DYNAMIC_EXECUTION]: The skill dynamically discovers and executes scripts and 'fix/check modes' at runtime based on the package manager and configuration files detected in the project path.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 10:58 PM