feature-validate

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill provides instructions for the agent to compare documentation against source code using standard read and search tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data (feature documentation and source code). While this creates a potential surface for indirect prompt injection, the risk is minimal as the skill's primary function is to generate analysis reports and it does not execute the code it audits.
  • [COMMAND_EXECUTION]: The skill mentions the use of 'Grep' and 'Glob' tools, but these are identified as pre-approved environment tools for searching files rather than arbitrary shell command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 09:08 PM
Security Audit — agent-trust-hub — feature-validate