meticulous-zero-diff-task

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill facilitates a legitimate development workflow using Meticulous, a visual testing service. All external resources, including the app.meticulous.ai domain and the alwaysmeticulous GitHub organization, are official vendor resources consistent with the skill's author.
  • [EXTERNAL_DOWNLOADS]: The skill recommends running meticulous-cli-update to ensure the local Meticulous environment is current. This is a standard practice for maintaining developer tooling.
  • [COMMAND_EXECUTION]: The instructions involve executing various meticulous agent commands (e.g., upload-build, trigger-test-run, reject-diff) and frontend build scripts. These are necessary and expected actions for the skill's stated purpose of UI verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data (visual diffs and DOM information) returned from the Meticulous platform via agent test-run-diffs.
  • Ingestion points: Data is received from Meticulous API endpoints (SKILL.md).
  • Boundary markers: None explicitly defined in the workflow instructions.
  • Capability inventory: The agent can write comments to the Meticulous platform and modify code based on the diff results.
  • Sanitization: Not applicable as the data consists of UI diffs intended for human/agent review within the Meticulous ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 04:29 PM
Security Audit — agent-trust-hub — meticulous-zero-diff-task