skills/enitrat/skill-issue/smithers/Gen Agent Trust Hub

smithers

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The project initialization script scripts/skill_smithers.py executes standard shell commands including git init, jj git init, and bun install to set up the development environment in the target directory specified by the user.
  • [EXTERNAL_DOWNLOADS]: The skill configuration and setup script initiate downloads of external dependencies from npm and GitHub repositories, which is expected behavior for a framework scaffolded with Node.js and TypeScript.
  • [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were identified; the skill is designed to operate within a project-specific working directory with explicit output paths for context and planning documents.
  • [PROMPT_INJECTION]: The MDX prompt templates are focused on development lifecycle tasks (research, planning, implementation, review) and do not contain instructions that attempt to bypass safety filters or ignore prior rules.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 10:15 AM