The Agent Skills Directory

[PROMPT_INJECTION]: No malicious patterns or instructions to override safety guidelines were found in the skill or its references. The triggers and instructions focus on logical analysis and risk assessment.
[DATA_EXFILTRATION]: No network calls, exfiltration patterns, or attempts to access sensitive system files (e.g., .ssh, .aws) were detected. The skill operates on the content provided by the user within the agent's context.
[REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts (e.g., curl|bash) or unverified packages.
[COMMAND_EXECUTION]: The skill does not perform any shell command execution or subprocess spawning. It is a text-based reasoning and reporting tool.
[CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found. The skill follows best practices for secret management by not requesting or storing sensitive credentials.
[INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (Subject Intake in Phase 1), it lacks exploitable capabilities such as tool access, file-system writes, or network operations. Therefore, the surface for indirect prompt injection is non-exploitable.
[DYNAMIC_EXECUTION]: No usage of eval(), exec(), or runtime compilation was found. The skill uses static Markdown and XML templates for output generation.

assumption-validator