Skills
skills/seqis/openclaw-skills-converted-from-claude-code/agent-validation-agent/Gen Agent Trust Hub

agent-validation-agent

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is configured to use the Bash tool to execute test suites and performance profiling scripts as its primary function.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes WebSearch and WebFetch to retrieve documentation and external information, which is a standard research capability for a validation agent.
  • [PROMPT_INJECTION]: Indirect prompt injection surface identified as the agent is designed to process and execute code from external sources.
  • Ingestion points: Data enters the context via Read, Grep, Glob, and WebFetch tools.
  • Boundary markers: There are no explicit instructions or delimiters provided to ignore embedded instructions within the code being validated.
  • Capability inventory: The agent possesses high-impact tools including Bash, Write, and Edit.
  • Sanitization: No evidence of input validation or sanitization is specified for the code or data being processed before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 01:13 AM