refactor-plan
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the
Bashtool to perform GitHub CLI operations (gh issue create) and to execute local test commands for verifying coverage. - [DATA_EXFILTRATION]: Transmits architectural plans and refactor strategies to GitHub. The skill mandates the exclusion of specific source code, function names, and file paths from these issues, serving as a data leakage prevention measure.
- [PROMPT_INJECTION]: Processes untrusted data from the local codebase through exploration tools (
Read,Grep,Glob), creating an indirect prompt injection surface. The impact is mitigated by the restricted scope of the output (plain text plans without code) and the lack of automated destructive write capabilities.
Audit Metadata