launch-asset-packager
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as an administrative coordinator for product launch assets. It tracks statuses, specifications, and checklists without executing dangerous code or accessing sensitive system files.
- [INDIRECT_PROMPT_INJECTION]: The instructions include a specific security warning (Instruction 1) to treat all pasted asset lists and exports as untrusted input. While the skill processes external data (store exports, asset lists), it lacks high-risk capabilities like network exfiltration or arbitrary command execution, keeping the surface area safe.
- [COMMAND_EXECUTION]: The skill mentions scripts like
registry-events.pyandindexpush.py. These are documented as platform-level tools for state recording and SEO submission, following a standard 'propose' pattern for state changes rather than direct system modification. - [DATA_EXPOSURE]: The skill reads from localized
memory/paths which are standard for its execution environment. It does not attempt to access sensitive user directories (e.g.,.ssh,.aws).
Audit Metadata