work-report-writer
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell and Python scripts (
report.sh,script.sh) to format text input into structured report templates. The scripts use proper shell quoting for all variables, ensuring that user-provided content cannot trigger unintended command execution. - [EXTERNAL_DOWNLOADS]: Includes links to the author's official homepage (bytesagain.com) and GitHub repository (github.com/bytesagain). These links are provided for documentation and support and do not involve runtime downloading of executable code.
- [SAFE]: No malicious patterns, such as prompt injection, obfuscated URLs, or data exfiltration, were detected. The skill's logic is transparent and focused on its stated purpose of report generation.
Audit Metadata