Hedera Hackathon Submission Validator
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Indirect Prompt Injection (SAFE): The skill is designed to analyze user-provided codebases. Evidence Chain: 1. Ingestion points: README.md and source code files. 2. Boundary markers: Absent. 3. Capability inventory: None (no tools or scripts). 4. Sanitization: Absent. The lack of tool-use capabilities prevents the exploitation of any potential prompt injection in the source data.
- Data Exposure & Exfiltration (SAFE): The skill focuses on project-related files and does not target sensitive system paths, ssh keys, or environment secrets.
- NO_CODE (SAFE): The skill consists exclusively of markdown instructions and does not include any executable dependencies or scripts.
- Metadata Poisoning (SAFE): The skill's metadata accurately reflects its stated purpose without deceptive instructions or hidden commands.
Audit Metadata