test-driven-refactoring
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill follows standard engineering practices for testing and refactoring.
- [COMMAND_EXECUTION]: The skill utilizes
uvto run development tools such aspytest,mypy, andruff. It also usesgitcommands for version control throughout the refactoring loop. - [EXTERNAL_DOWNLOADS]: The skill references standard Python development libraries including
pytest,mypy,ruff, andapprovaltestsfrom well-known package registries. - [PROMPT_INJECTION]: The skill contains an inherent surface for indirect prompt injection as it processes local source code and test data to generate characterization tests.
- Ingestion points: Reads local source code and user-provided data in
SKILL.mdandtemplates/characterization_tests.py. - Boundary markers: No explicit boundary markers or instruction-guardrails are defined in the code templates.
- Capability inventory: Executes shell commands via
uvandgit; writes characterization files (golden masters) to the local filesystem. - Sanitization: No explicit sanitization or validation of the ingested code or data is performed.
Audit Metadata