data-intensive-patterns
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's main instruction file (SKILL.md) contains no prompt injection, bypass markers, or instructions to ignore safety guidelines. It strictly defines professional roles for code generation and review.\n- [SAFE]: The Python script 'scripts/adr.py' is a legitimate utility for document generation. It uses standard library modules for file and string operations and includes safety measures such as slugification of titles to prevent path injection or directory traversal.\n- [SAFE]: No hardcoded credentials, sensitive file access (e.g., SSH keys, AWS config), or unauthorized network operations were detected in any of the provided files.\n- [SAFE]: The skill does not download external code, install unverifiable packages, or execute remote scripts. It has no external dependencies defined in standard configuration files.\n- [SAFE]: Although the skill processes user-provided code for review (an indirect prompt injection surface), it lacks the network and file-system capabilities required to make such an attack impactful. The risk is mitigated by the skill's narrow operational scope.
Audit Metadata