refactor-helper

Pass

Audited by Gen Agent Trust Hub on Feb 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions include the execution of standard development commands using the Bash tool, such as npm test, npx ts-prune, and npx depcheck, to facilitate the refactoring workflow.
  • [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it is designed to ingest and process untrusted external source code.
  • Ingestion points: Source code is read into the agent context via the Read, Grep, and Glob tools.
  • Boundary markers: Absent. There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious instructions embedded in code comments or strings.
  • Capability inventory: The skill allows for file modifications via the Write tool and command execution via the Bash tool.
  • Sanitization: No sanitization or validation is performed on the ingested code content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 26, 2026, 01:36 PM