avalonia-zafiro-development

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Prompt Injection (SAFE): No instructions to override safety filters or reveal system prompts were detected. Instructional language is used appropriately to define coding standards.
  • Data Exposure & Exfiltration (SAFE): No hardcoded credentials, sensitive file paths, or unauthorized network operations were found.
  • Obfuscation (SAFE): No Base64, zero-width characters, or other encoding techniques were used to hide content.
  • Unverifiable Dependencies & Remote Code Execution (SAFE): No external package installations or remote script executions were detected.
  • Privilege Escalation (SAFE): No commands requesting administrative or root access (e.g., sudo, chmod) were identified.
  • Persistence Mechanisms (SAFE): No attempts to modify system startup files or create scheduled tasks were found.
  • Metadata Poisoning (SAFE): Metadata fields contain appropriate descriptions and no hidden instructions.
  • Indirect Prompt Injection (SAFE): The skill does not define ingestion points for untrusted external data.
  • Time-Delayed / Conditional Attacks (SAFE): No date, time, or environment-specific triggers for dangerous operations were found.
  • Dynamic Execution (SAFE): No use of dynamic code execution or runtime compilation was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:36 PM