Confirm the source
Compare the repository, publisher, and installation command before continuing.
×
Third-party audit
High riskGen Agent Trust Hub
review-and-refactor · github/awesome-copilot
Provider summary
This skill is designed to refactor code by following instructions located in specific repository files. It is vulnerable to indirect prompt injection because it treats external markdown files as authoritative instructions. Additionally, it requires the ability to execute project tests, which involves running arbitrary code from the repository.
The provider classified the analyzed snapshot as CRITICAL risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- fail
- Risk level
- CRITICAL
- Audited
- Feb 25, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.