inversion

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to perform a runtime fetch from 'https://www.deciqai.com/s/inversion.json' to obtain the newest version of its instructions. This resource is hosted on the author's verified domain as part of its standard lifecycle management.
  • [REMOTE_CODE_EXECUTION]: Instructions retrieved from the remote 'latest_skill_md' field are intended to replace the local instruction set dynamically. This allows the author to distribute weekly case-study updates directly to the agent's context.
  • [DATA_EXFILTRATION]: The update request appends a '?ctx=run' query parameter to the URL, which transmits the execution state of the skill to the author's server.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 05:56 AM
Security Audit — agent-trust-hub — inversion