NYC

startup-validator

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious code or patterns detected.
  • [COMMAND_EXECUTION] (LOW): The skill includes a Python script (market_analyzer.py) intended to be run via command line, but it only performs data processing on local JSON files and lacks any dangerous system calls, shell spawning, or external network requests.
  • [DATA_EXFILTRATION] (SAFE): No network operations or access to sensitive file paths (like SSH keys or AWS credentials) were found. The script only reads the input file provided and writes results to a similarly named file.
  • [PROMPT_INJECTION] (SAFE): No instructions attempting to bypass safety filters or override agent behavior were detected in the markdown files or code.
  • [INDIRECT_PROMPT_INJECTION] (LOW): The skill processes external data (market metrics) and interpolates it into a markdown report. While this is a common pattern for data processing skills, the risk is minimal as the script primarily performs numerical calculations and uses specific keys from the input data.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:08 PM