source-driven-development
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on development best practices, such as verifying framework versions and official documentation before implementation.
- [DATA_EXPOSURE]: The skill instructs the agent to read project manifest files (e.g., package.json, requirements.txt, go.mod) to determine library versions. This is standard behavior for the stated purpose and does not involve exfiltration or access to sensitive credentials.
- [EXTERNAL_DOWNLOADS]: While the skill suggests fetching documentation from official sources (MDN, GitHub, official doc sites), it does not automate these downloads via scripts or execute remote code. It mentions 'Context7' as a tool for documentation retrieval, which is a known documentation-focused tool.
Audit Metadata