base
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines strict engineering constraints aimed at reducing code complexity (e.g., maximum line counts and parameter limits). These are instructional and do not attempt to bypass AI safety protocols.
- [CREDENTIALS_UNSAFE]: The skill includes a section on credentials management that instructs the agent to ask the user for a centralized access file (e.g.,
~/Documents/Access.txt) to populate a project's.envfile. This is documented as a standard development workflow that requires explicit user consent and identifies common API key patterns for legitimate services (OpenAI, Anthropic, etc.). - [SAFE]: The skill explicitly promotes security best practices, such as ensuring secrets are not committed to version control, validating all input using schemas (Zod/Pydantic), and using parameterized SQL queries to prevent injection attacks.
- [COMMAND_EXECUTION]: The skill references various developer tools and commands (npm, pytest, ruff, mypy) within the context of TDD and quality gate workflows. These are standard development operations intended to be run locally by the agent during coding tasks.
Audit Metadata