security-reviewer
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain executable code, scripts, or remote dependencies.
- [SAFE]: Examples of insecure code, such as hardcoded secret placeholders and injection patterns, are clearly labeled for diagnostic purposes and are accompanied by secure remediation examples.
- [SAFE]: No evidence of data exfiltration, persistence mechanisms, or unauthorized credential access was found.
- [SAFE]: While the skill processes user-provided code which is a surface for indirect prompt injection, it lacks access to sensitive tools (like file system writes or network access) that would enable exploitation. Ingestion points are the conversation context; boundary markers and sanitization are absent, but capability inventory is zero.
Audit Metadata