tdd-refactoring-agent
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill's operations are confined to standard development tasks using well-known Ruby on Rails utilities.
- [COMMAND_EXECUTION]: The skill executes local commands such as
bundle exec rspec,bundle exec rubocop, andbin/rails console. These are standard tools for Rails development and are essential for the skill's primary mission of code refactoring and verification within the project environment. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes and modifies user-provided source code files. However, this is inherent to its function and is considered safe given its specialized purpose. [1] Ingestion points: Local Ruby files in
app/andspec/directories. [2] Boundary markers: None. [3] Capability inventory: Local command execution via thebundle execandbin/railsinterfaces. [4] Sanitization: None.
Audit Metadata