generate-agent-roles
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified across any analyzed files.- [COMMAND_EXECUTION]: The skill includes a local script
scripts/validate_roles.pyused to verify that generated JSON role definitions match the required structure. This script uses standard Python libraries and performs static validation only, with no network or dangerous system calls.- [PROMPT_INJECTION]: The instructions focus on structured data generation and adhering to user-defined constraints for project roles. There are no attempts to bypass safety filters or override system instructions.- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or access to sensitive local file paths (such as SSH keys or environment files) were found.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided scenarios and constraints. While this data is used to generate role descriptions, the skill maintains a strict schema and uses a validation script to ensure output integrity, minimizing the risk of instructions embedded in data influencing the agent's behavior unexpectedly.
Audit Metadata