page-driven-development
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No instructions attempting to bypass safety protocols or override agent behavior were detected.
- [Data Exposure & Exfiltration] (SAFE): No access to sensitive file paths, hardcoded credentials, or network exfiltration patterns identified.
- [Obfuscation] (SAFE): The content is clear markdown with no Base64, zero-width characters, or encoded commands.
- [Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill does not reference external packages or remote scripts for execution.
- [Privilege Escalation] (SAFE): No commands involving sudo, chmod, or system administrative changes are present.
- [Persistence Mechanisms] (SAFE): No modifications to shell profiles, cron jobs, or startup services were found.
- [Metadata Poisoning] (SAFE): Metadata fields are legitimate and consistent with the instructional nature of the skill.
- [Indirect Prompt Injection] (SAFE): While the skill advises on code review, it possesses no executable capabilities or tools (subprocesses, file writes, network) that could be triggered by malicious code inputs.
- [Time-Delayed / Conditional Attacks] (SAFE): No logic exists to trigger behavior based on external conditions or time.
- [Dynamic Execution] (SAFE): No runtime code generation, deserialization, or dynamic loading techniques are used.
Audit Metadata