command-sub-agent
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains instructional content for code generation and review. It does not contain any patterns typical of prompt injection, such as attempts to override system instructions, safety bypasses, or 'DAN' style role-play triggers.- [DATA_EXFILTRATION]: While the skill instructions involve reading local project specification files (YAML format) from the 'docs/specs/' directory, there are no network operation tools or commands (e.g., curl, wget) that would allow this data to be exfiltrated externally.- [COMMAND_EXECUTION]: The skill focuses on reading files and generating code templates. It does not invoke shell commands, modify system configurations, or attempt to gain elevated privileges.- [REMOTE_CODE_EXECUTION]: There are no instructions or scripts associated with the skill that download and execute external code or scripts from remote servers.- [SAFE]: The code generation examples provided (TypeScript and Go) follow standard software architecture patterns (Clean Architecture/DDD) and do not include malicious logic or obfuscated content.
Audit Metadata