skills/djalmajr/skills/work-judge/Gen Agent Trust Hub

work-judge

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of local shell commands, tests, and benchmarks (referred to as 'oracles') to settle architectural decisions and verify candidate claims. This is a primary functional requirement of the skill and is constrained by instructions to verify evidence independently.
  • [PROMPT_INJECTION]: The skill ingests external code and sub-agent outputs, creating an attack surface for indirect prompt injection. Ingestion points: Reads repository files and sub-agent JSON responses. Boundary markers: Uses structured JSON blocks for all inter-agent communication. Capability inventory: File reading, sub-agent spawning, and shell command execution ('re-run it'). Sanitization: Implements mandatory schema validation and a 'Hardened judge contract' that requires independent re-reading of source files to verify any claim made by potentially compromised or hallucinating candidates.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:42 PM
Security Audit — agent-trust-hub — work-judge