skills/danangjoyoo/nerd/nerd-loop/Gen Agent Trust Hub

nerd-loop

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script, scripts/loop.py, to manage task logic and state transitions. This script is a deterministic decision reducer that strictly validates JSON inputs against a defined schema and calculates integrity hashes (SHA-256) to ensure the consistency of the task ledger. It does not perform network operations or unauthorized file access.
  • [PROMPT_INJECTION]: The skill incorporates comprehensive defensive designs to mitigate injection risks. It establishes a 'Canonical Authority Order' that prioritizes platform and safety rules over user guidance and model inference. Furthermore, it implements a 'Safety and Authority' theorem for behavioral memory, requiring explicit user confirmation for any instructions retrieved from past sessions to prevent 'taint' or behavior overrides.
  • [DATA_EXFILTRATION]: No patterns associated with data exfiltration or unauthorized access to sensitive system files were found. The skill leverages host-provided durable storage (S2/S3 state classes) for persistence, ensuring that all data handling is confined to authorized environments.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform remote code downloads or execution. It relies entirely on local scripts and established platform capabilities to perform its functions.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were identified within the skill's instructions or scripts. The documentation explicitly advises redacting sensitive data and secrets from the task ledger.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 07:43 AM
Security Audit — agent-trust-hub — nerd-loop