contract-first-designer
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes business requirements which may be provided by external users. While this is a surface for indirect prompt injection, the skill's capabilities are limited to writing documentation to a local directory (
docs/api-report/) and it does not possess dangerous tools or execution environments that would make such an injection exploitable. - [COMMAND_EXECUTION]: The skill provides templates for Markdown and JSON output but does not contain or invoke any shell commands or scripts.
- [DATA_EXFILTRATION]: There are no network operations (curl, wget, etc.) or indicators of data being sent to external domains. All activity is restricted to local file generation.
- [OBFUSCATION]: The content is written in plain Markdown and YAML. No hidden characters, Base64 encoding, or homoglyph attacks were identified.
Audit Metadata