validate-skills
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats were identified. The skill defines a set of validation rules and provides instructions for the agent to check repository contents for compliance.
- [COMMAND_EXECUTION]: The skill suggests using the
fdutility to identify directories for validation. This is a standard filesystem discovery operation with no privilege escalation or dangerous flags. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and reporting on content from
SKILL.mdfiles in the repository. While this creates a point of ingestion for external data, the skill does not grant the agent dangerous capabilities or provide paths for data exfiltration based on that content. - Ingestion points:
SKILL.mdfiles in subdirectories ofskills/. - Boundary markers: None specified.
- Capability inventory: File reading and text output only; no subprocess execution, network tools, or file-write capabilities are requested.
- Sanitization: None requested.
Audit Metadata