refactor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted source code from the user's environment, creating a potential surface for indirect prompt injection where malicious instructions hidden in code comments or strings could influence the agent's behavior.
- Ingestion points: The agent reads project files using
Read,Glob, andGreptools as part of the audit process (SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat file content as data only or to ignore embedded instructions.
- Capability inventory: The agent has permissions to
Read,Glob,Grep, andEditfiles (SKILL.md). - Sanitization: There is no evidence of content sanitization or validation of the code before it is processed or refactored.
Audit Metadata