cobra-dev
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation files providing deep-dive references into the spf13/cobra library's internal structures, such as command resolution flows and flag set hierarchies.
- [PROMPT_INJECTION]: No prompt injection, jailbreak attempts, or instructions designed to override the agent's safety protocols were detected.
- [DATA_EXFILTRATION]: The skill does not access sensitive local files (e.g., credentials, SSH keys) or environment variables, and it contains no network transmission logic.
- [REMOTE_CODE_EXECUTION]: There are no commands or instructions that trigger the download or execution of remote scripts or unverified third-party packages.
- [OBFUSCATION]: All content is provided in clear, plain-text markdown. No Base64, zero-width characters, homoglyphs, or other obfuscation techniques are present.
- [DYNAMIC_EXECUTION]: While the documentation describes how the Cobra library uses shell script wrappers for completion, the skill itself does not perform any dynamic code generation or execution.
Audit Metadata