user-research

Pass

Audited by ZeroLeaks on Apr 15, 2026

Risk Level: NONE
Scan Summary

**Executive Summary** SKILL.md is clear, well-structured, and fully reviewable — it's a straightforward informational reference on user research methods with no tool invocations, code execution, or external data fetches. It stays clean on instruction/data boundaries and does not push the agent to treat user-supplied or external content as trusted instructions. The tested scenarios did not show material prompt-injection risk or skill-induced worsening of downstream behavior. Confidence is low, however, because behavior analysis was not run, meaning there is no empirical validation of how loading this skill actually changes downstream agent behavior compared to a no-skill baseline; finite testing and the absence of that comparison limit what can be conclusively claimed.

Score
93/100
Verdict
PASS
Confidence
low
Findings
0
Section Analysis (3)
TransparencyPASS
96/100

This skill is a purely informational reference for planning, conducting, and synthesizing user research. It contains no tool invocations, no code execution, no external fetches, no hidden behavior, and no authority claims. All behavior is fully described in the markdown.

Prompt InjectionPASS
92/100

The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.

Agent BehaviorSkipped

Behavior analysis was not run.

Checks
TransparencyNo hidden execution paths or embedded secrets
Prompt injectionData and instructions kept separate
Agent behaviorNo harmful downstream agent effects detected
Coverage DetailsClick to expand
Discovered Files
1
Omitted Files
0
Analyzed Bytes
1.7 KB
Sections Completed
2
Sections Skipped
1
Behavior Probes
0/0
Audit Metadata
Score
93/100
Verdict
PASS
Confidence
low
Sections
2/3 completed
Mode
risk
Files Scanned
1
Duration
51.1s
Analyzed
Apr 15, 2026, 11:05 PM
Security Audit — zeroleaks — user-research