plain-writing

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The evaluation setup scripts (such as evals/build_discoposse_histories.py) are designed to fetch data from the Hugging Face repository DiscoPosse/agent-llm-traces. Hugging Face is a well-known and established service for hosting and sharing machine learning datasets.
  • [DATA_EXFILTRATION]: The benchmark utility (evals/run_eval.py) transmits text samples and writing prompts to OpenAI's official API to evaluate the agent's ability to rewrite content. OpenAI is an established and well-known service provider.
  • [SAFE]: The repository follows secure development practices by utilizing a .env file for API key management, ensuring that sensitive credentials are not hardcoded within the skill or its associated scripts.
  • [SAFE]: The core logic in SKILL.md is limited to natural language formatting and stylistic instructions, with no execution of shell commands, file system modifications, or arbitrary code evaluation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 02:40 PM
Security Audit — agent-trust-hub — plain-writing