sequential-think
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE] (SAFE): The script writes thought history to ~/.config/sequential-think/thought_history.json. No access to sensitive system files, credentials, or personal data was detected.\n- [REMOTE_CODE_EXECUTION] (SAFE): There are no patterns involving remote script downloads, piped execution, or external package installations. The tool relies exclusively on the Python standard library.\n- [COMMAND_EXECUTION] (SAFE): The Python script does not invoke external shell commands or use the subprocess module. Operations are limited to local file system I/O.\n- [PROMPT_INJECTION] (SAFE): No instructions attempting to bypass agent safety filters or override system constraints were found in the skill metadata or script comments.\n- [INDIRECT_PROMPT_INJECTION] (SAFE): The skill takes user-defined thought strings as input and stores them in a local JSON file. Since it lacks network access and executable capabilities, this does not present a viable injection surface for malicious exploitation.\n- [OBFUSCATION] (SAFE): All code and documentation are provided in clear, human-readable text without encoding or hidden characters.
Audit Metadata