community-operations
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Prompt Injection (SAFE): The instructions in
SKILL.mdare standard grounding directives for an AI agent. Phrases like 'Ignore generic approaches' are used to prioritize specific domain knowledge over general training data, which is a benign functional requirement. - Data Exposure & Exfiltration (SAFE): No sensitive file paths, hardcoded credentials, or network operations (curl, wget, fetch) were detected in any of the files.
- Unverifiable Dependencies & Remote Code Execution (SAFE): The skill contains no package management files (package.json, requirements.txt) and no commands that download or execute external scripts.
- Obfuscation (SAFE): All content is provided in plain text and markdown. No Base64, zero-width characters, or hex encoding were found.
- Persistence & Privilege Escalation (SAFE): There are no commands that interact with system configuration, shell profiles, or administrative privileges.
Audit Metadata