report-lifecycle
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists of markdown documentation and JSON evaluation cases. It does not include any scripts (e.g., Python, Node.js), shell commands, or binaries.
- [SAFE]: The instructions promote secure practices by enforcing ephemeral storage paths (
ephemeral-reports/<producer>/**) and requiring validation before artifacts are considered discoverable. - [SAFE]: The skill explicitly defines role-based boundaries for report promotion, ensuring that only a designated role can move reports to durable storage, which prevents unauthorized persistence or authority elevation.
Audit Metadata