skills/nicepkg/ai-workflow/agile/Gen Agent Trust Hub

agile

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION] (SAFE): No attempts to override system instructions, bypass safety filters, or extract system prompts were detected in the documentation or metadata.
  • [DATA_EXFILTRATION] (SAFE): The skill does not perform any network operations (no curl, wget, or requests). It does not access sensitive local file paths or hardcoded credentials.
  • [COMMAND_EXECUTION] (SAFE): While the skill includes a Python script (scripts/validate.py), its functionality is limited to local file system checks to verify the integrity of the skill's own structure. It does not execute arbitrary shell commands or process untrusted input.
  • [REMOTE_CODE_EXECUTION] (SAFE): There are no patterns of downloading and executing remote scripts. No unverifiable third-party dependencies are requested during runtime.
  • [DYNAMIC_EXECUTION] (SAFE): The provided Python code uses yaml.safe_load() for configuration parsing, which is the recommended secure method for handling YAML data, preventing object injection vulnerabilities.
  • [OBFUSCATION] (SAFE): All files consist of clear-text Markdown, YAML, JSON, and Python code. No Base64, zero-width characters, or homoglyphs were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:08 PM