coach
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill frequently executes the
datecommand via Bash for date verification and arithmetic. This is used to prevent scheduling errors and is a standard functional requirement for the skill's purpose. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile uses the!commandsyntax to executecatfor including the content ofCOACH.md. This is a common pattern for modularizing skill files on supported platforms. - [PROMPT_INJECTION]: Prompt injection patterns detected in
tests/v3.2-evals.md(e.g., instructions to ignore previous rules) are confirmed to be mock inputs used for testing the skill's built-in security sanitization filters. These strings are benign in the context of the test suite. - [SAFE]: The skill includes robust internal guardrails, specifically the 'External Text Validation Module', which monitors for malicious directives in external text, showing that the author has proactively addressed indirect prompt injection risks.
Audit Metadata