simplify
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates by reading and refactoring external source code, which constitutes an attack surface for indirect prompt injection where malicious code could attempt to influence the agent's logic. This risk is effectively managed by explicit operating invariants that require human authorization before any disk mutations and mandate verification via tests. \n
- Ingestion points: Target source files and diffs are inspected in Phase 1.\n
- Boundary markers: The skill does not define specific delimiters to isolate external code from instructions, but uses a structured Changeset format for reporting.\n
- Capability inventory: The skill is capable of writing to the file system and executing shell commands for verification purposes in Phase 3.\n
- Sanitization: No automated sanitization of external code is performed.\n- [COMMAND_EXECUTION]: The skill executes local commands such as tests, linters, and syntax checks to verify refactored code. These operations are performed as part of the standard development workflow and are triggered only after user approval of the changes.
Audit Metadata