agent-refinement — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  This skill functions as a code refinement specialist, providing guidelines for testing and optimization. It includes automation to run local test suites via npm. While this is standard functionality for development tools, it creates a surface for indirect prompt injection if the project being refined contains malicious test scripts in its configuration.

  Risk: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONMar 1, 2026Full report

• Socket

  pass

  No alerts

  Mar 18, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWMar 1, 2026Full report

• Runlayer

  pass

  1 file scanned · No issues

  Risk: NONEMar 2, 2026Full report

• ZeroLeaks

  warn

  3 findings · Score: 69/100

  Risk: MEDIUMApr 16, 2026Full report