technical-requirements-interview
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions and YAML/JSON/YAML-based data templates. There are no scripts (Python, JavaScript, Bash, etc.) or executable binaries included in the skill package.
- [COMMAND_EXECUTION]: The skill mentions a command pattern
/technical-requirements-interview, which is a high-level agent command, and references/implementation-planner, which is an external skill reference. No raw shell commands or sub-processes are invoked. - [EXTERNAL_DOWNLOADS]: No external URLs or remote resources are referenced for download or execution. All operations are designed to work with local files provided by the user (e.g.,
business-requirements.yaml). - [DATA_EXFILTRATION]: The skill instructions specify writing interview progress to a local file (
technical-interview.jsonl) and the final output to another local file (technical-requirements.yaml). There are no network operations or instructions to send data to external endpoints. - [PROMPT_INJECTION]: The instructions are focused on structured data collection and do not contain patterns aimed at bypassing AI safety filters or overriding system instructions.
- [CREDENTIALS_UNSAFE]: While the skill includes a section for 'Security & Authentication' in the requirements template, it specifically recommends environment variables or vaults for secret storage and does not include any hardcoded credentials in its own files.
Audit Metadata