context-management-context-restore
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a technical guide and architectural framework for context restoration. It does not contain any malicious instructions, prompt injections, or attempts to bypass safety filters.
- [SAFE]: No hardcoded credentials, sensitive file access patterns, or unauthorized network operations were identified in the scripts or documentation.
- [SAFE]: The skill design incorporates security-conscious concepts, such as cryptographic context signatures and semantic consistency verification, as detailed in the integrity checks module.
- [PROMPT_INJECTION]: The skill architecture is designed to process external project context, which represents an untrusted data ingestion surface (indirect prompt injection risk).
- Ingestion points:
VectorDatabase.searchinsub-skills/1-semantic-vector-search.mdandload_componentinsub-skills/3-context-rehydration-patterns.md. - Boundary markers: Not explicitly defined in the provided code snippets.
- Capability inventory: The skill is scoped to context reconstruction and does not include high-risk capabilities like arbitrary command execution or network exfiltration.
- Sanitization: A conceptual module for validation and integrity checks is provided in
sub-skills/7-context-validation-and-integrity-checks.md.
Audit Metadata