exposure-coach
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities were identified during the analysis of the skill. The codebase follows secure engineering practices, relying exclusively on the Python standard library and utilizing robust data parsing logic. Specifically, the script extracts signals from external JSON files and immediately converts them into integers or matches them against fixed string constants before generating any output. This approach ensures that no arbitrary text from the input files can be reflected in the final reports, eliminating the surface for indirect prompt injection. The skill does not perform network operations, access sensitive file paths, or use hardcoded credentials.
Audit Metadata