declutter
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
git mvfor moving files andrmfor deleting obsolete or backup files. These actions are governed by the workflow's Phase 4 and 5, which mandate creating a proposal and obtaining explicit user approval before any changes are executed. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of project file and directory names during the assessment phase.
- Ingestion points: The skill reads the project's directory structure using
treeandls -la(documented in Phase 1 of SKILL.md). - Boundary markers: The workflow establishes a boundary by requiring a written "Proposal" in Phase 4 and manual "User Approval" in Phase 5 before execution, preventing automated obedience to injected instructions.
- Capability inventory: The skill has the capability to move files, delete files, and commit changes to the repository via the Task tool as described in Phase 5 (SKILL.md).
- Sanitization: The skill instructions do not specify any sanitization or validation logic for the file system metadata retrieved from the environment before it is processed by the agent.
Audit Metadata