auto-simplify
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests untrusted source code and maintains operational tools that could be abused if the code contains malicious instructions.
- Ingestion points: The agent reads source code from the local file system based on the provided scope argument (SKILL.md).
- Boundary markers: The instructions lack explicit boundary markers or delimiters to separate code from instructional context, and there are no warnings to the agent to ignore natural language instructions embedded within the code.
- Capability inventory: The skill has access to powerful capabilities including command execution via the Bash tool for running tests and file system modifications via the Edit and Write tools.
- Sanitization: No sanitization or validation of the source code content is performed before it is integrated into the agent's context.
Audit Metadata