simplify-audit
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external source code and repository scopes, which constitutes an ingestion point for untrusted data. The risk is mitigated by the skill's restricted execution protocol and lack of dangerous capabilities.\n
- Ingestion points: Target files, functions, modules, and repository scopes (SKILL.md).\n
- Boundary markers: The instructions explicitly mandate a read-only process and the preservation of existing semantics and public contracts (SKILL.md).\n
- Capability inventory: No file-write tools, network operations, or shell command execution capabilities are defined or requested.\n
- Sanitization: Not explicitly present; the skill relies on its strictly limited read-only scope and structural rubric.\n- [SAFE]: No malicious patterns, obfuscation, or persistence mechanisms were detected. The skill adheres to best practices for safe code analysis.
Audit Metadata