smithers
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The project initialization script
scripts/skill_smithers.pyexecutes standard shell commands includinggit init,jj git init, andbun installto set up the development environment in the target directory specified by the user. - [EXTERNAL_DOWNLOADS]: The skill configuration and setup script initiate downloads of external dependencies from npm and GitHub repositories, which is expected behavior for a framework scaffolded with Node.js and TypeScript.
- [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were identified; the skill is designed to operate within a project-specific working directory with explicit output paths for context and planning documents.
- [PROMPT_INJECTION]: The MDX prompt templates are focused on development lifecycle tasks (research, planning, implementation, review) and do not contain instructions that attempt to bypass safety filters or ignore prior rules.
Audit Metadata