prompt-engineering
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [Prompt Injection] (SAFE): The skill architecture prioritizes safety by including dedicated modules for prompt validation and injection prevention (e.g., 'prompts/validation.py').- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials or sensitive data access patterns were found. The skill correctly uses environment variable templates (.env.example) for managing API keys.- [Remote Code Execution] (SAFE): The skill does not perform any remote script downloads or dynamic code execution from untrusted sources. All listed dependencies are industry-standard libraries.- [Indirect Prompt Injection] (LOW): Although the skill defines templates for processing external content, it incorporates sanitization and validation as core patterns to mitigate risks associated with untrusted input.
Audit Metadata