code-simplifier
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run development commands such as
pnpm lint,pnpm tsc, andpnpm testto validate code changes. This is standard practice for maintaining project integrity and is explicitly documented inSKILL.mdandchecklists/post-simplify.md. - [DATA_INGESTION_SURFACE]: The agent ingests and processes user-provided source code to perform its core function of simplification, which creates an inherent surface for indirect prompt injection.
- Ingestion points: The agent reads source files within the project scope as described in
SKILL.mdandchecklists/pre-simplify.md. - Boundary markers: No specific boundary markers or 'ignore' instructions are defined to separate code logic from potential embedded instructions.
- Capability inventory: The agent has filesystem write access through the
Edittool and command execution capabilities for project tooling. - Sanitization: There is no mention of sanitizing the input code to filter out potential injection attacks.
Audit Metadata