skill-quality
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation instructs the agent to run a local script,
skills/skill-eval/scripts/eval_runner.py, to validate and execute skill benchmarks. This is a standard and documented developer workflow for quality measurement. - [PROMPT_INJECTION]: The skill is designed to process external feedback and session history, which creates a surface for indirect prompt injection. However, it explicitly includes robust safety protocols in
references/diagnostic-and-safety-findings.mdto identify and isolate malicious instructions by deriving safety predicates. - [SAFE]: The skill promotes security best practices, such as credential redaction and prevention of sensitive data flows at the earliest boundary, and does not contain any unauthorized network activity or remote code downloads.
Audit Metadata