skills/badhope/skill/reflector/Gen Agent Trust Hub

reflector

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows standard coding practices for execution analysis. No malicious patterns, hardcoded secrets, or unauthorized data access were detected in the analyzed instructions.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it processes external task data.
  • Ingestion points: Data enters the system via the ReflectionContext class (specifically execution_log, result, and errors fields) in SKILL.md.
  • Boundary markers: There are no explicit delimiters or boundary markers used when processing these fields.
  • Capability inventory: The skill's capabilities are limited to data analysis and writing reports to PersistentStorage. It lacks high-risk capabilities like subprocess execution or network operations.
  • Sanitization: No explicit sanitization or input validation logic was identified for the ingested data fields.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 06:59 AM