threat-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a methodology for security analysis using standard tools like Grep and Glob to identify vulnerabilities in a target system.
- [SAFE]: No remote dependencies, network operations, or hardcoded credentials were detected. The skill uses standard documentation practices to guide security audits.
- [SAFE]: The skill references local environment security rules (e.g., .claude/rules/security.md) and explicitly defines risks like indirect prompt injection to promote defensive security awareness.
- [SAFE]: No dynamic context injection or obfuscated code patterns were found. The metadata is consistent with the skill's stated purpose.
Audit Metadata