traceability-auditor

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICAL
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill includes a GitHub Actions workflow template using actions/checkout@v4, which is a trusted source maintained by GitHub. No other external dependencies are referenced.- [COMMAND_EXECUTION] (SAFE): The bash scripts use standard system utilities like grep and sort for local file processing. The file path construction follows standard patterns and does not exhibit shell injection vulnerabilities in the provided context.- [DATA_EXFILTRATION] (SAFE): File system access is limited to project-specific directories (e.g., storage/, src/, tests/). There are no network operations (such as curl or fetch) or hardcoded credentials detected.- [PROMPT_INJECTION] (SAFE): The instructions are purely functional and intended for documentation and traceability management. There are no attempts to override agent behavior, bypass safety protocols, or leak system prompts.- [MALICIOUS_URLS] (SAFE): The automated alert regarding 'requirements.md' is identified as a false positive. In the context of the skill's logic, this string represents a local markdown file and not a network destination.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 06:40 PM