knowledge-assistant

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates primarily as a read-only documentation assistant. Its instructions explicitly forbid modifications to shared knowledge, Kanban boards, or project manifests, ensuring that it cannot be used to perform unauthorized state changes.
  • [SAFE]: Write capabilities are strictly limited to a local '.feedback' directory. This process is protected by multiple checks: it requires an explicit user request, a manifest setting ('feedback.enabled'), and verification that the directory is excluded from version control (via .gitignore). This prevents accidental exposure or exfiltration of the recorded notes.
  • [SAFE]: The skill incorporates clear boundary management, instructing the agent to stop after providing prompt suggestions for other skills. It refuses to continue execution into write-capable skills within the same invocation, maintaining a human-in-the-loop requirement for any state-changing actions.
  • [SAFE]: No evidence of network communication, remote script execution, obfuscated content, or unsafe dependency usage was found across the skill's markdown files and configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 05:11 AM
Security Audit — agent-trust-hub — knowledge-assistant