reflect
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a reasoning-only extension designed to pause execution and analyze conversation context. It does not require or request external tool permissions or network access.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (scripts/bias_pattern_detector.py, scripts/conversation_depth_analyzer.py, and scripts/directional_recommendation_validator.py) to perform heuristic analysis of the conversation. These scripts were audited and found to be secure: They depend exclusively on the Python standard library; They perform text analysis using safe regular expressions and do not use dynamic execution functions like eval() or exec(); They do not initiate network connections or interact with sensitive system files or environment variables.
- [DATA_EXFILTRATION]: No exfiltration vectors were found. The skill processes conversation data locally within the agent's context and does not include mechanisms to transmit data to external domains.
- [PROMPT_INJECTION]: The instructions do not contain patterns for bypassing safety filters, extracting system prompts, or overriding agent behavior in a malicious way.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or other credentials were found in the instructions or scripts.
Audit Metadata