refactor-legacy-code
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands for static analysis and dependency auditing, which are standard practices for code refactoring tasks.
- Evidence: Commands like
tree,npm outdated,pip list --outdated,eslint,pylint, andRuboCopare recommended in the instructions to assess the state of the codebase. - [PROMPT_INJECTION]: The skill is designed to process external code files, creating a surface for indirect prompt injection if the code being refactored contains malicious instructions disguised as comments or data.
- Ingestion points: Source code files provided by the user for refactoring analysis.
- Boundary markers: None implemented in the current instruction set.
- Capability inventory: Execution of local analysis tools and shell commands (
tree,npm,pip, etc.). - Sanitization: No content sanitization is performed on the input code before the agent analyzes it.
Audit Metadata