refactoring
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external source code which could potentially contain malicious instructions intended to influence the agent's behavior during the refactoring process.\n
- Ingestion points: The skill reads source code using the
Read,Grep, andGlobtools specified in SKILL.md.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts in the analyzed code are provided in the skill instructions.\n
- Capability inventory: The skill has access to
Bash,Edit, andWritetools, allowing for file modification and command execution.\n - Sanitization: No explicit sanitization or validation of the ingested code content is performed before processing.\n- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executerg(ripgrep) for searching code patterns.\n - Evidence: The instructions provide examples such as
rg "^(\s*)(def|function|fn|func)\s+\w+" --after-context=60to find long functions.\n - Context: While used legitimately for static analysis, the inclusion of the
Bashtool provides a broad execution capability.
Audit Metadata