home-designer-software-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code templates designed to enhance the agent's ability to detect software piracy indicators. The logic focuses on pattern matching within repository metadata (topics, descriptions, and README content) to identify potential risks.
- [SAFE]: The Python and JavaScript code snippets are provided as static examples for the agent to follow when generating responses or performing analysis. These examples do not include dynamic execution of untrusted code or unauthorized access to system resources.
- [SAFE]: The included reporting mechanism utilizing the GitHub CLI (
gh api) is a legitimate example of how to report copyright violations or suspicious content through official channels. It does not perform data exfiltration or credential harvesting. - [SAFE]: The skill references well-known, legitimate software products (e.g., Home Designer Pro) and open-source projects (e.g., Blender, Sweet Home 3D) as safe alternatives for users.
- [SAFE]: (Category 8
- Indirect Prompt Injection) The skill defines a process for the agent to ingest and analyze untrusted external data (repository metadata). While this constitutes an attack surface, the skill implements defensive logic to categorize the data rather than allowing it to influence sensitive tool execution or bypass security boundaries.
Audit Metadata