lotus-migration
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely composed of documentation and instructional content. It does not contain executable code, obfuscated payloads, or commands targeting sensitive system files. All external references are to generic placeholders or well-known services.
- [PROMPT_INJECTION]: The skill operates by analyzing local documentation and application metadata, which constitutes an indirect prompt injection surface. However, the skill does not contain any malicious instructions or bypass attempts, and the risk is inherent to the process of data analysis.
- Ingestion points: Reads local documentation files (e.g.,
docs/lotus-notes-apps/investigation.md) and structural details of Lotus Notes applications via the Read, Glob, and Grep tools. - Boundary markers: No explicit delimiter-based boundary markers or instructions to ignore embedded commands are present in the skill's logic.
- Capability inventory: The skill utilizes Bash, Read, Glob, and Grep for analysis and mapping tasks.
- Sanitization: No explicit sanitization or content filtering is performed on the data ingested from documentation files before it is processed by the agent.
Audit Metadata