senior-fullstack
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Prompt Injection] (SAFE): No instructions designed to override agent behavior, bypass safety filters, or extract system prompts were detected in the skill description or documentation.
- [Data Exposure & Exfiltration] (SAFE): No sensitive file paths, hardcoded credentials, or unauthorized network communication patterns (e.g., curl, wget) were found.
- [Obfuscation] (SAFE): No encoded content, zero-width characters, or homoglyph attacks were detected. The scripts and documentation use plain, readable text.
- [Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill refers to 'npm install' and 'pip install' in its documentation, but no package manifest files (package.json, requirements.txt) are present in the provided file list. No remote scripts are downloaded or executed.
- [Privilege Escalation] (SAFE): No commands involving sudo, chmod 777, or administrative bypasses were identified.
- [Persistence Mechanisms] (SAFE): No attempts to modify shell profiles, crontabs, or system services were detected.
- [Dynamic Execution] (SAFE): The provided Python scripts (fullstack_scaffolder.py, project_scaffolder.py, code_quality_analyzer.py) are skeletal templates that perform basic path validation and printing; they do not use eval(), exec(), or runtime compilation.
Audit Metadata