ff15-workspace-operation-customization
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for workspace-local configuration and validation. It does not contain any malicious patterns such as prompt injection, obfuscation, or persistence mechanisms.
- [COMMAND_EXECUTION]: The skill instructs the agent to run a bundled validation script (
validate-operation-yaml.mjs) using Node.js. This is a legitimate development tool used to ensure YAML files conform to the expected schema. - [DATA_EXFILTRATION]: No network operations or data exfiltration patterns were detected. The validation script uses standard Node.js file system modules (
node:fs) to read and validate local files only. - [REMOTE_CODE_EXECUTION]: No remote code downloads or executions from untrusted sources were found. The script includes an optional dynamic import for the standard
yamlpackage, which is a common pattern for handling optional local dependencies.
Audit Metadata