code-refactoring

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious instructions, data exfiltration, or obfuscated content were detected in the skill.- [COMMAND_EXECUTION]: The skill instructs the agent to run local development commands like 'npm test', 'npx tsc', and 'npm run lint' to validate refactored code (SKILL.md).- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes untrusted user code for refactoring. * Ingestion points: User-provided code snippets for refactoring (SKILL.md). * Boundary markers: Absent. * Capability inventory: Local shell execution of testing and linting tools (SKILL.md). * Sanitization: Absent. This risk is inherent to the skill's function and does not escalate the safety verdict.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 04:59 PM