skills/cosmix/loom/refactoring/Gen Agent Trust Hub

refactoring

Pass

Audited by Gen Agent Trust Hub on Mar 14, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes external source code which could potentially contain malicious instructions intended to influence the agent's behavior during the refactoring process.\n
  • Ingestion points: The skill reads source code using the Read, Grep, and Glob tools specified in SKILL.md.\n
  • Boundary markers: No explicit delimiters or instructions to ignore embedded prompts in the analyzed code are provided in the skill instructions.\n
  • Capability inventory: The skill has access to Bash, Edit, and Write tools, allowing for file modification and command execution.\n
  • Sanitization: No explicit sanitization or validation of the ingested code content is performed before processing.\n- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute rg (ripgrep) for searching code patterns.\n
  • Evidence: The instructions provide examples such as rg "^(\s*)(def|function|fn|func)\s+\w+" --after-context=60 to find long functions.\n
  • Context: While used legitimately for static analysis, the inclusion of the Bash tool provides a broad execution capability.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 14, 2026, 11:30 PM