autoplay-system-designer

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or data exfiltration vectors were detected in the skill's markdown files or Python scripts.
  • [COMMAND_EXECUTION]: The skill includes a local validation script, scripts/validate_autoplay_spec.py, which is used to check the integrity of user-provided autoplay specifications. The script uses only standard Python libraries (argparse, json, sys) and performs safe schema validation without any dangerous execution or network calls.
  • [PROMPT_INJECTION]: The instructions in SKILL.md are focused on design and compliance guidelines. There are no patterns suggesting attempts to bypass AI safety filters or override system instructions.
  • [DATA_EXFILTRATION]: No network operations or access to sensitive local file paths (e.g., credentials, SSH keys) were found.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data via a JSON specification file, the processing is limited to structural validation. The skill lacks exploitable capabilities such as file writing, dynamic code execution, or network access that could be leveraged by an indirect injection attack.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 03:28 AM