stelow-product-open-source
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is purely educational and strategic in nature, providing frameworks for open-source business models, sponsorship strategies, and organizational structures. It does not contain any prompts intended to bypass safety filters or exfiltrate data.
- [NO_CODE]: The provided file is a markdown document without any embedded executable scripts, binaries, or automated remote code execution triggers. The frontmatter specifically includes
disable-model-invocation: true, which restricts the agent's ability to call external models, further limiting the attack surface. - [COMMAND_EXECUTION]: The skill mentions interacting with local scripts (e.g.,
scripts/stelow next) as part of a manual or guided workflow process. These are referenced as project-specific tools for state management and do not accept untrusted external input or facilitate unauthorized access. - [EXTERNAL_DOWNLOADS]: The documentation references legitimate and well-known platforms for open-source sustainability, such as GitHub Sponsors, Open Collective, Tidelift, and Patreon. These references are informational and do not represent a security risk.
Audit Metadata