recommend

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions were audited for malicious patterns, and no security issues were found. Its functionality is limited to reasoning and providing architectural advice based on pre-existing local reference files.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user input from the $ARGUMENTS parameter to determine architectural constraints. While it acts as a data ingestion point, the skill only has permission to read local reference files and invoke search tools. The absence of file-writing or network-access capabilities ensures that any potential injection cannot result in data exfiltration or persistent system changes.\n- [COMMAND_EXECUTION]: The skill utilizes specific qmd CLI tools and MCP search functions to query research data. These tools are restricted to read-only operations for information retrieval and do not provide a path for arbitrary command execution or shell injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 08:02 AM