skill-standardization
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is structural validation and standardization of other skill files. Analysis of the scripts (
validate_skill.sh,validate_catalog_sync.py, andregression_folded_description_quotes.sh) shows they perform standard file read, string parsing (using grep/sed/regex), and path validation without performing unsafe operations. - [COMMAND_EXECUTION]: The skill uses
Bashto execute its internal validation scripts. These scripts operate on local files within the agent's environment and do not accept untrusted external input for command construction. Thepython3calls invalidate_skill.shandvalidate_catalog_sync.pyare used for safe text processing and JSON manipulation. - [EXTERNAL_DOWNLOADS]: The skill references documentation at
agentskills.iobut does not perform any automated downloads or remote code execution from this or any other external domain. - [DATA_EXFILTRATION]: There are no network operations or exfiltration patterns detected. The scripts focus on local repository maintenance and drift detection.
- [PROMPT_INJECTION]: The instructions in
SKILL.mdare focused on standardizing other files. They do not contain instructions meant to bypass safety filters or override the agent's core behavior.
Audit Metadata