context-optimizer
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Prompt Injection (SAFE): No instruction override patterns or safety bypass attempts were detected.
- Data Exposure & Exfiltration (SAFE): No hardcoded credentials, sensitive file paths, or network operations are present.
- Indirect Prompt Injection (LOW): The skill is designed to ingest and process external code (React components) which represents an untrusted data surface.
- Ingestion points: Uses
Read,Grep, andGlobtools to access user-provided source code. - Boundary markers: No specific delimiters or instructions to ignore embedded commands in the source code are defined.
- Capability inventory: Has file system write access via
WriteandEdittools. - Sanitization: No explicit sanitization or validation of input code is performed before analysis.
- Unverifiable Dependencies & RCE (SAFE): No package managers, remote script downloads, or dynamic execution patterns were found.
Audit Metadata