context-management-context-restore

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a technical guide and architectural framework for context restoration. It does not contain any malicious instructions, prompt injections, or attempts to bypass safety filters.
  • [SAFE]: No hardcoded credentials, sensitive file access patterns, or unauthorized network operations were identified in the scripts or documentation.
  • [SAFE]: The skill design incorporates security-conscious concepts, such as cryptographic context signatures and semantic consistency verification, as detailed in the integrity checks module.
  • [PROMPT_INJECTION]: The skill architecture is designed to process external project context, which represents an untrusted data ingestion surface (indirect prompt injection risk).
  • Ingestion points: VectorDatabase.search in sub-skills/1-semantic-vector-search.md and load_component in sub-skills/3-context-rehydration-patterns.md.
  • Boundary markers: Not explicitly defined in the provided code snippets.
  • Capability inventory: The skill is scoped to context reconstruction and does not include high-risk capabilities like arbitrary command execution or network exfiltration.
  • Sanitization: A conceptual module for validation and integrity checks is provided in sub-skills/7-context-validation-and-integrity-checks.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:10 PM