jobs-to-be-done
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious injection patterns, role-play attempts, or safety bypass instructions were detected. The instructions follow standard framework guidance.
- [DATA_EXFILTRATION]: No network operations or commands to access sensitive system files, environment variables, or credentials were found.
- [OBFUSCATION]: The skill consists of clear, plain-text markdown. No hidden text, encoded strings, homoglyphs, or zero-width character obfuscation was detected.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute external scripts or packages. Provenance links refer to the author's own public documentation repository.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: The skill processes interview notes and research data as defined in the SKILL.md input section. Boundary markers: The instructions mention an 'ARGUMENTS:' block for delimiting input. Capability inventory: There are no subprocess calls, network requests, or file-writing operations across the skill scripts. Sanitization: No explicit sanitization is present, but no dangerous capabilities exist to exploit.
Audit Metadata