agent-development

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • Safe Educational Framework: The skill serves as a comprehensive guide for agent development, providing markdown templates and instructional documentation. It does not perform any autonomous network operations or file system modifications beyond its documented scope. \n- Secure Script Implementation: The validate-agent.sh script is a utility for local file validation. It adheres to safe scripting practices, using standard shell commands to inspect file structure without external dependencies or risky execution patterns. \n- Principle of Least Privilege: The documentation explicitly advises developers to limit agent capabilities to the minimum necessary tools, a fundamental security practice that reduces the potential impact of any single agent being compromised. \n- Indirect Prompt Injection Surface: The templates provided are designed for agents that ingest and process external content, such as code. This creates a surface where the agent might encounter untrusted instructions within that content. The skill addresses this by promoting the use of clear behavioral boundaries and structured processing steps in agent prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 05:20 PM