skills/dbhat93/job-search-os/coach/Gen Agent Trust Hub

coach

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill frequently executes the date command via Bash for date verification and arithmetic. This is used to prevent scheduling errors and is a standard functional requirement for the skill's purpose.
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file uses the !command syntax to execute cat for including the content of COACH.md. This is a common pattern for modularizing skill files on supported platforms.
  • [PROMPT_INJECTION]: Prompt injection patterns detected in tests/v3.2-evals.md (e.g., instructions to ignore previous rules) are confirmed to be mock inputs used for testing the skill's built-in security sanitization filters. These strings are benign in the context of the test suite.
  • [SAFE]: The skill includes robust internal guardrails, specifically the 'External Text Validation Module', which monitors for malicious directives in external text, showing that the author has proactively addressed indirect prompt injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 05:50 PM