featbit-release-decision
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified. The skill acts as a control layer that directs the agent to appropriate sub-skills for implementation.\n- [DATA_EXFILTRATION]: The skill uses the
project-syncskill to manage project state in a database, which is consistent with its intended purpose of maintaining experiment history and is within the vendor's scope.\n- [CREDENTIALS_UNSAFE]: Access tokens for the FeatBit web application are handled as optional invocation arguments and are not hardcoded within the skill files, following best practices for secret management.\n- [PROMPT_INJECTION]: The instructions provide a logical framework for decision-making (CF triggers) and do not attempt to override safety protocols or force malicious behaviors.
Audit Metadata