analyze
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to read user-provided artifacts and generate a structured JSON specification for a learning guide. All operations are local and follow a strict archetype-based structure.
- [DATA_EXPOSURE]: Although the skill processes codebase files, it does so to summarize architecture and flow. It does not include network capabilities for exfiltrating the processed data, and the output is limited to a local JSON specification.
- [REMOTE_CODE_EXECUTION]: No remote script downloads or package installations are performed. The skill utilizes a local tool handoff mechanism (
learning-guide:render) to process its output. - [PROMPT_INJECTION]: The skill body and metadata contain no instructions to override safety filters, disregard previous rules, or extract system prompts. The instructions focus entirely on the transformation of input artifacts into the
tour-spec.jsonformat. - [COMMAND_EXECUTION]: No dangerous shell commands or privilege escalation attempts were detected. The skill explicitly forbids the inclusion of raw source code in the generated markdown bodies, favoring file path references instead.
Audit Metadata