skills/d-laub/dlaub-togo/returns/Gen Agent Trust Hub

returns

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill contains purely instructional content related to Python programming. No attempts to override system prompts, bypass safety filters, or use role-play/jailbreak techniques were detected.
  • [DATA_EXFILTRATION]: The skill does not access sensitive files or credentials. Code examples use standard libraries like requests and httpx for demonstration purposes without targeting sensitive user data or exfiltration endpoints.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving the download and execution of remote scripts or the use of dangerous dynamic execution functions like eval() or exec().
  • [COMMAND_EXECUTION]: The skill does not instruct the agent to execute shell commands or interact with the operating system in a privileged manner.
  • [OBFUSCATION]: The content is written in clear, plain Markdown and Python. No hidden characters, Base64 encoding, homoglyphs, or other obfuscation techniques are present.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found in the text or code snippets.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, well-known Python packages (returns, requests, httpx, anyio) and a type-checker (pyrefly). It does not download unverified external dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 09:59 PM
Security Audit — agent-trust-hub — returns