signal-with-a-link
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strict tool restrictions in its frontmatter, limiting file writes to the
./gtm/directory and shell execution exclusively to the internalscore.pyscript. - [SAFE]: The
score.pyscript relies solely on Python's standard library. It includes safety checks such as maximum input size limits (2MB) and does not perform any network requests or dynamic code execution. - [SAFE]: The skill's instructions focus on structured data validation (JSON) and do not contain any prompt injection, obfuscation, or persistence mechanisms.
- [SAFE]: File access via the script is restricted to reading local signal data for validation purposes and does not attempt to access sensitive system paths or credentials.
Audit Metadata