code-refactor-master
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and refactor code from local repository directories such as leetcode_java/ and leetcode_python/, which presents a surface for indirect prompt injection if those files contain malicious instructions embedded in comments or string literals.
- Ingestion points: Code files within the repository accessed through the Read, Glob, and Grep tools.
- Boundary markers: The skill lacks specific delimiters or instructions for the agent to ignore potential instructions embedded within the code data it processes.
- Capability inventory: Access is restricted to Read, Glob, Grep, Edit, and LSP tools; notably, it does not include shell execution capabilities, which limits the potential impact of an injection attack.
- Sanitization: There is no evidence of sanitization or validation of the ingested code content before it is processed by the agent's logic.
Audit Metadata