ccdawn-score-loop
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill instructions and configuration reveals no malicious patterns, obfuscation, or credential harvesting risks.
- [COMMAND_EXECUTION]: The skill executes project-defined scripts for validation, packaging, and status monitoring. This is intended functionality for a development-focused agent and includes explicit stop conditions and evidence requirements.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via project profiles and result artifacts.
- Ingestion points: Project profiles (e.g.,
references/*profile.md) and repository documents are ingested to define metrics and execution commands. - Boundary markers: The instructions mandate a "parsed gate decision" and require that validation output be "parsed, not eyeballed."
- Capability inventory: The agent has the capability to execute shell commands (
status,fastValidation,fullValidation,package) and perform file writes to allowed project surfaces. - Sanitization: The skill relies on structured parsing of outputs rather than explicit escaping for shell command interpolation.
Audit Metadata