skills/ellmos-ai/skills/dev/Gen Agent Trust Hub

dev

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs local directory scans to identify project structure and technology stacks. The accompanying script, dev_core.py, uses the Python standard library to iterate through file paths and extensions without reading file content or performing network communication.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local file names as input. Ingestion points: dev_core.py (via pathlib). Boundary markers: Present in scan_text (headers and section labels). Capability inventory: None (no file-write, network, or subprocess calls). Sanitization: None (passive metadata reporting only). This implementation is safe as it does not execute the data or provide a path for escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 05:40 AM