reducing-entropy
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to evaluate and refactor external source code. This introduces a vulnerability surface where an attacker could place instructions within code comments or documentation that the agent might interpret as directives to simplify the system by removing security-critical logic.
- Ingestion points: The skill operates on the files within the current codebase environment (referenced in README.md and SKILL.md).
- Boundary markers: There are no explicit instructions to treat code content as untrusted or to ignore embedded natural language commands within the analyzed code.
- Capability inventory: The skill is intended to be used with agents capable of reading, writing, and deleting files across a codebase.
- Sanitization: The instructions do not define any validation or filtering mechanisms for the data being processed.
Audit Metadata