javascript-runtime

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No evidence of instructions designed to bypass safety filters or override core agent behavior.
  • [DATA_EXFILTRATION]: No network operations, hardcoded credentials, or sensitive file path references (e.g., .ssh, .env) were detected.
  • [REMOTE_CODE_EXECUTION]: The skill does not include package installations or mechanisms to download and execute external scripts.
  • [OBFUSCATION]: Analysis found no hidden content, Base64-encoded commands, homoglyphs, or zero-width character techniques.
  • [PRIVILEGE_ESCALATION]: No commands for acquiring administrative rights or modifying system-level configurations are present.
  • [INDIRECT_PROMPT_INJECTION]: Although the skill involves reasoning about code snippets, it lacks the functional capabilities (file writing, shell access, or network requests) required to execute malicious instructions found in untrusted data.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic command execution syntax in its markdown instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 09:24 AM