patronum

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Prompt Injection (SAFE): No instructions were found that attempt to override system prompts, bypass safety filters, or extract underlying instructions. The guidelines in SKILL.md are focused on task classification and output formatting.
  • Data Exposure & Exfiltration (SAFE): There are no hardcoded credentials, sensitive file path references, or network-bound commands (curl, fetch, etc.) in any of the files.
  • Unverifiable Dependencies & Remote Code Execution (SAFE): The skill references the patronum library as a subject for documentation but does not attempt to install packages or download/execute remote scripts.
  • Obfuscation (SAFE): All content is in plain text. No Base64, zero-width characters, or other encoding techniques intended to hide malicious payloads were detected.
  • Indirect Prompt Injection (LOW): While the skill processes user queries to generate code, it lacks the capabilities (like file writing or network access) to be exploited as a delivery vector for indirect injection attacks. The risk is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:37 PM