explain-yourself
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill incorporates strong security and privacy practices by explicitly instructing the agent to avoid disclosing sensitive information, such as system prompts, private scratchpads, or credentials, in its output.
- [SAFE]: The provided Python script
scripts/render_explanation.pyserves as a security validator. It implements a function calledenforce_content_safetythat recursively scans all data fields for forbidden patterns, including private keys, API tokens, and internal model reasoning traces, and rejects the packet if any are found. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured data from
PACKET.jsonwhich could potentially originate from untrusted external sources. - Ingestion points: Data enters the skill's context through the
--input PACKET.jsonfile processed by therender_explanation.pyscript. - Boundary markers: The skill uses a rigid structure defined in
templates/explanation.mdwith explicit headers to separate different types of evidence and reasoning. - Capability inventory: The skill performs local command execution of its own validation script and chains with documentation and reporting skills.
- Sanitization: The skill uses a dedicated validation script that employs regular expressions to detect and block the exfiltration of credentials and private internal deliberation traces.
Audit Metadata