fuck-over-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from a user-provided codebase path to identify code simplification opportunities.
- Ingestion points: Files within the specified path or the entire repository tree are read into the agent context.
- Boundary markers: The instructions do not define delimiters or warnings to ignore instructions that might be embedded within the audited code files.
- Capability inventory: The skill is intended to 'apply the picks,' which involves writing changes back to the filesystem.
- Sanitization: There is no mention of sanitizing or validating the code content before the agent evaluates it for 'cuts.'
Audit Metadata