skills/clawic/skills/Consultant/Gen Agent Trust Hub

Consultant

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed as a persona-based assistant for business consulting. It operates within a defined local directory (~/Clawic/data/consultant/) and includes explicit instructions to maintain factual accuracy and avoid storing sensitive information such as credentials or secrets.
  • [DATA_EXPOSURE]: Technical controls are present in the form of instructions (memory-template.md) that forbid the storage of private data not required for work. The skill does not attempt to access environment variables, shell history, or other sensitive user configuration files.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface through its discovery process where it collects client context.
  • Ingestion points: Discovery interviews and context updates logged in memory.md.
  • Boundary markers: Structure is provided by templates in deliverables.md, though explicit delimiters for raw user input are not mandated.
  • Capability inventory: File system writes restricted to the skill's own workspace folder.
  • Sanitization: The skill relies on quality control checklists (quality-gates.md) to ensure the agent verifies logic and evidence before outputting recommendations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 02:02 PM