code-refactoring-refactor-clean
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Detailed analysis of the skill instructions and the implementation playbook reveals no evidence of malicious behavior, data exfiltration, or persistence mechanisms.
- [EXTERNAL_DOWNLOADS]: The resource playbook includes configuration examples for several well-known and trusted CI/CD services and GitHub Actions, such as those from GitHub, CodeRabbit, and CodiumAI. These are provided as architectural examples for developer workflows and represent no security risk.
- [PROMPT_INJECTION]: The skill uses the
$ARGUMENTSplaceholder to ingest external code for analysis. While this creates a potential surface for indirect prompt injection, it is an inherent characteristic of code-refactoring tools and is not exploited by the skill. - Ingestion points: Data enters via the
$ARGUMENTSvariable inSKILL.md. - Boundary markers: No explicit delimiters are used in the prompt template.
- Capability inventory: The skill is designed for code analysis and refactoring suggestion.
- Sanitization: Relies on the host agent's native safety filters.
Audit Metadata