workflow-checkpoint-refactor
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
!syntax to execute shell commands such asgit rev-parse,find,git status, andgit logat load time to populate repository context. It also usesgit,npm,npx,uv, andcargovia the Bash tool to perform refactoring operations. These are standard developer tools used appropriately for the skill's purpose.\n- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by reading repository source files and theREFACTOR_PLAN.mdfile.\n - Ingestion points: Processes project source files during analysis and reads the
REFACTOR_PLAN.mdfile to determine workflow state.\n - Boundary markers: No explicit delimiters are specified in the instructions for isolating content from these files.\n
- Capability inventory: Includes shell command execution (
Bash), file system modification (Write,Edit), and task delegation (Task).\n - Sanitization: Content from the plan file and source files is processed without specific validation or sanitization against embedded instructions.
Audit Metadata