code-simplifier
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- PROMPT_INJECTION (LOW): The skill is vulnerable to indirect prompt injection because it is designed to read, analyze, and modify external source code which could contain malicious instructions embedded in comments or strings.
- Ingestion points: The skill uses
Read,Grep, andGlobtools to ingest code from the local filesystem (identified in SKILL.md sections 4 and 7). - Boundary markers: Absent. There are no instructions to the agent to ignore or delimit instructions found within the code being processed.
- Capability inventory: The skill utilizes
Bash(for running tests and linting),Write/Edit(for code modification), andRead(for analysis). - Sanitization: Absent. The skill does not include steps to sanitize or validate the content of the code files before they are processed by the agent.
Audit Metadata