usm
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were identified. The skill adheres to safe practices by requesting user confirmation before writing to the file system.
- [COMMAND_EXECUTION]: The skill manages document lifecycle by suggesting file saves to a specific directory (docs/usm/). This behavior is guarded by explicit user confirmation requirements in the execution instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect injection by processing external context from PRDs and RFCs. 1. Ingestion points: User-provided PRDs, RFCs, and notes. 2. Boundary markers: Absent. 3. Capability inventory: File system write operations. 4. Sanitization: Absent.
Audit Metadata