edit-claude

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard project management practices for Claude Code environments, focusing on project context, coding standards, and persistent memory management.
  • [DATA_EXPOSURE]: The skill manages configuration files in standard locations (e.g., ~/.claude/CLAUDE.md). It explicitly warns users against including sensitive data like credentials or API keys and provides templates illustrating secure practices (using environment variables instead of hardcoded secrets).
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to create and modify instruction files that influence future agent behavior. It includes a 'MANDATORY Validation' section that requires the agent to verify content is non-sensitive and appropriate for persistent memory before writing, which acts as a safeguard against misusing the instruction-loading mechanism.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 06:17 AM
Security Audit — agent-trust-hub — edit-claude