remove-deadcode
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bunto execute various shell-based tasks, includingbunx tscfor project scanning,bun run typecheckfor validation, andbun testfor regression testing. - [COMMAND_EXECUTION]: Orchestrates file system modifications through subagents using
rmfor file deletion andgitfor committing changes. - [EXTERNAL_DOWNLOADS]: Triggers the download and execution of the TypeScript compiler package via
bunx. - [PROMPT_INJECTION]: The skill scans local source code, which acts as a surface for indirect prompt injection. Ingestion points: Files located in the
src/directory. Boundary markers: None explicitly defined in the prompts passed to subagents. Capability inventory: File system write/delete access, shell command execution, and Git repository management. Sanitization: The skill mitigates risks by requiring verification via LSP (LspFindReferences) and compiler-level checks (tsc --noUnusedLocals) before any code is modified or removed, ensuring that only machine-verified dead code is targeted.
Audit Metadata