melech-roi
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists exclusively of instructional markdown content and visual examples. It does not utilize any tools or perform operations involving sensitive data access, file system modifications, or network communication.\n- [NO_CODE]: No code files, scripts, or package manifest files (such as package.json or requirements.txt) are included in the skill repository. The logic is entirely contained within natural language instructions for the AI.\n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external data such as pull request diffs and conversational ideas, which creates a theoretical injection surface.\n
- Ingestion points: User-provided pull request diffs, local branch diffs, and textual descriptions of technical ideas as specified in
SKILL.md.\n - Boundary markers: There are no defined delimiters or specific instructions for the agent to disregard embedded commands within the analyzed data.\n
- Capability inventory: The skill is strictly informational and lacks any execution capabilities, shell access, or API tools.\n
- Sanitization: No input validation or content filtering procedures are defined for the analyzed data.\n
- Context: Due to the complete absence of functional capabilities to exploit, this surface does not represent an actionable security risk and is categorized as safe.
Audit Metadata