refactor-code-smells
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill instructions and documentation focus on established software engineering principles and refactoring patterns. The provided reference materials (e.g., for Rust, Python, C++, etc.) describe idiomatic language features for improving code quality.
- [COMMAND_EXECUTION]: The scripts
change_coupling.pyandfile_length.pyutilize thesubprocessmodule to rungit logandgit ls-files. These calls are implemented using list-based arguments withoutshell=True, which is a secure method to invoke external binaries for repository analysis. - [DYNAMIC_EXECUTION]: The
line_count.pyutility uses Python'sast.parseandtokenizemodules to perform static analysis on source files. This is a benign implementation for counting logical lines of code and does not involve the execution of the code being analyzed. - [INDIRECT_PROMPT_INJECTION]: While the skill analyzes local source code and git history (providing a theoretical surface for indirect injection), the process is governed by instructions that mandate developer verification, testing, and manual review, significantly mitigating the risk of accidental obedience to instructions embedded in analyzed data.
Audit Metadata