skill-standardization

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is structural validation and standardization of other skill files. Analysis of the scripts (validate_skill.sh, validate_catalog_sync.py, and regression_folded_description_quotes.sh) shows they perform standard file read, string parsing (using grep/sed/regex), and path validation without performing unsafe operations.
  • [COMMAND_EXECUTION]: The skill uses Bash to execute its internal validation scripts. These scripts operate on local files within the agent's environment and do not accept untrusted external input for command construction. The python3 calls in validate_skill.sh and validate_catalog_sync.py are used for safe text processing and JSON manipulation.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation at agentskills.io but does not perform any automated downloads or remote code execution from this or any other external domain.
  • [DATA_EXFILTRATION]: There are no network operations or exfiltration patterns detected. The scripts focus on local repository maintenance and drift detection.
  • [PROMPT_INJECTION]: The instructions in SKILL.md are focused on standardizing other files. They do not contain instructions meant to bypass safety filters or override the agent's core behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 07:41 AM