crypto-review
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of markdown instructions for an AI agent to perform manual analysis tasks. It does not include any code (Python, JavaScript, shell scripts) or configuration files that execute actions.
- [SAFE]: There are no network operations, external downloads, or remote code execution patterns identified. The skill is designed for static analysis of provided content.
- [SAFE]: The instructions explicitly exclude access to sensitive cryptographic material (keys, secrets, HSMs) from the analysis scope.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted third-party content (source code and configuration). While this creates an attack surface for indirect prompt injection, the skill lacks any capabilities (such as file-write, network access, or command execution) that could be exploited if an injection occurred. The severity is safe as it is a purely informational task.
Audit Metadata