new-app

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: Analyzed the skill instructions and found no malicious patterns across all 11 threat categories.
  • [NO_CODE]: The skill consists entirely of instructional text and markdown templates without any executable scripts or binary files.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting user input and writing it to a file (BUSINESS_LOGIC.md).
  • Ingestion points: User responses to interview questions.
  • Boundary markers: None explicitly used in the final file write instruction.
  • Capability inventory: Read, Write, Edit (SKILL.md).
  • Sanitization: None present.
  • Analysis: While the skill processes untrusted user data, the output is restricted to a documentation file, which does not present a path to code execution or exfiltration under current configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 08:26 PM