delivery-gate
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs local-only analysis using standard Python libraries. No network access, data exfiltration, or external communication patterns were found.
- [SAFE]: Command execution is limited to the hook script itself, which must be manually installed by the user. The script does not spawn sub-processes or execute arbitrary commands.
- [INDIRECT_PROMPT_INJECTION]: The script ingests the session transcript to perform regex-based checks for rationalization patterns. 1. Ingestion points:
hooks/quality-gate.pyreads transcript from standard input or a file path provided in the input payload. 2. Boundary markers: Absent. 3. Capability inventory: File read access for transcript and library metadata, disk usage checks, and session termination via exit codes; no network or file-write capabilities. 4. Sanitization: Absent.
Audit Metadata