vsa-implementation-guard
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): No security issues detected. The skill is a collection of architectural guidelines, coding standards, and best practices for C# development.
- Indirect Prompt Injection (LOW): The skill possesses a surface for indirect prompt injection as it uses file-reading tools (
Read,Glob,Grep) to process local files. However, the risk is negligible as it lacks high-risk capabilities like network access, file writing, or command execution. - Ingestion points: Local files read via
Read,Glob, andGreptools. - Boundary markers: Absent; the skill does not use specific delimiters to separate untrusted file content from instructions.
- Capability inventory: Restricted to read-only operations and text generation; no
exec,eval, or network tools. - Sanitization: Not applicable as the skill primarily provides static guidance rather than processing untrusted data for execution.
Audit Metadata