moai-core-rules
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a core instruction set (ruleset) for an agentic workflow. It focuses on delegation, quality assurance, and structured development cycles.
- [COMMAND_EXECUTION]: The skill documentation and examples reference the use of the
Bashtool and Pythonsubprocessmodule. These are used in a benign context to illustrate automation of development tasks such as running tests (pytest), linting (pylint), and git operations. These activities are consistent with the skill's stated purpose as a development foundation. - [EXTERNAL_DOWNLOADS]: The
reference.mdfile contains links to well-known and trusted technical documentation and resources, including InfoQ, arXiv, Pytest, OWASP, and Martin Fowler's blog. These references are informative and do not initiate any automated downloads of executable code. - [DATA_EXPOSURE]: The skill explicitly promotes the use of security tools such as
detect-secretsandbanditto prevent credential exposure and ensure code safety. No hardcoded credentials or sensitive data access patterns were found.
Audit Metadata