traceability-auditor
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: CRITICAL
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill includes a GitHub Actions workflow template using
actions/checkout@v4, which is a trusted source maintained by GitHub. No other external dependencies are referenced.- [COMMAND_EXECUTION] (SAFE): The bash scripts use standard system utilities likegrepandsortfor local file processing. The file path construction follows standard patterns and does not exhibit shell injection vulnerabilities in the provided context.- [DATA_EXFILTRATION] (SAFE): File system access is limited to project-specific directories (e.g.,storage/,src/,tests/). There are no network operations (such ascurlorfetch) or hardcoded credentials detected.- [PROMPT_INJECTION] (SAFE): The instructions are purely functional and intended for documentation and traceability management. There are no attempts to override agent behavior, bypass safety protocols, or leak system prompts.- [MALICIOUS_URLS] (SAFE): The automated alert regarding 'requirements.md' is identified as a false positive. In the context of the skill's logic, this string represents a local markdown file and not a network destination.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata