code-refactor
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Jujutsu (jj) version control system to gather context. It executes commands such as
jj diff -sandjj diff -- pathto analyze code changes. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via external data sources.
- Ingestion points: The skill ingests untrusted data from the web using
WebFetchand processes local code viajj diffoutput. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between its own instructions and the content being processed.
- Capability inventory: The skill can execute shell commands (
jj) and spawn additional sub-agents via theTasktool. - Sanitization: There is no evidence of sanitization or validation of the ingested content before it is processed or passed to other agents.
Audit Metadata