senior-computer-vision
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No override markers, bypass instructions, or jailbreak patterns were detected in the skill's markdown files or metadata.
- [Data Exposure & Exfiltration] (SAFE): No hardcoded credentials (API keys, tokens) or sensitive file path access (e.g., .ssh, .env) were found. The scripts lack network capabilities and interact solely with local paths provided via command-line arguments.
- [Remote Code Execution] (SAFE): No remote script execution, untrusted downloads, or unverifiable dependency installations were identified.
- [Indirect Prompt Injection] (SAFE): 1. Ingestion points: --input argument in scripts/vision_model_trainer.py, scripts/inference_optimizer.py, and scripts/dataset_pipeline_builder.py. 2. Boundary markers: Absent. 3. Capability inventory: None; scripts contain only boilerplate logging and placeholder logic. 4. Sanitization: Absent. The surface is not exploitable as the skill lacks dangerous tools or command execution capabilities.
- [Dynamic Execution] (SAFE): No use of eval(), exec(), or runtime code generation was detected in the provided Python scripts.
- [Obfuscation] (SAFE): No hidden content, Base64 encoding, zero-width characters, or homoglyphs were identified across any analyzed files.
Audit Metadata