guiding-users
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Command Execution (SAFE): The utility scripts
analyze_onboarding_metrics.pyandgenerate_tour_config.jsare used for processing local data and generating configuration files. They do not invoke shell commands, spawn dangerous subprocesses, or execute arbitrary code.- External Downloads (SAFE): The skill references industry-standard frontend libraries includingreact-joyride,driver.js, andintro.js. These are reputable open-source projects used for UI walkthroughs and do not pose a security risk.- Data Exposure (SAFE): State management for onboarding (e.g., tracking if a tour was completed) is handled vialocalStorage, which is a safe and standard method for persisting non-sensitive user preferences in a browser environment.- Prompt Injection (SAFE): The skill's instructions and documentation focus entirely on technical implementation and do not contain any patterns designed to override AI safety filters or hijack agent behavior.
Audit Metadata