pick-harness
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer workflows for agent engineering and follows security best practices for prompt engineering and environment management.
- [COMMAND_EXECUTION]: The skill scaffolds utility bash scripts for tasks like link checking and log processing. It also provides command templates for running agents in isolated sandboxes using standard
claudeCLI flags like--safe-modeand--allowedTools. - [EXTERNAL_DOWNLOADS]: Mentions well-known and trusted external tools such as Vercel's
agent-browserand Playwright for UI testing. These references are documented neutrally as recommendations for end-to-end testing and do not involve unverified third-party sources. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided descriptions of agent failures (untrusted input), it mitigates risks by recommending containment techniques, explicit schema validation, and dry-running generated artifacts in restricted environments to verify their behavior.
Audit Metadata