spec
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns identified. The skill provides a structured template for engineering documentation.
- [DATA_EXFILTRATION]: No exfiltration pathways detected. Network commands in documentation examples are restricted to internal localhost endpoints for testing purposes.
- [COMMAND_EXECUTION]: Bash command examples (e.g.,
npm test,curl,grep) are instructional and intended for local build verification; they do not involve unauthorized execution or remote code downloads. - [PROMPT_INJECTION]: The skill does not attempt to bypass safety guidelines or override agent constraints. It explicitly incorporates security invariants, such as preventing passwords from appearing in logs (INV-2).
Audit Metadata