mechanism-audit
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a structured diagnostic tool for auditing operational contracts and safety mechanisms. No evidence of credential theft, remote code execution, or malicious persistence was identified.
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data such as specifications, workflow definitions, and task plans, which creates a potential surface for indirect prompt injection.
- Ingestion points: The skill processes external documentation and code files as part of the audit workflow (SKILL.md).
- Boundary markers: The instructions do not define delimiters or explicit boundary warnings to separate audited content from the agent's instructions.
- Capability inventory: The skill utilizes file system read access to perform audits and file system write access to generate session-based artifacts (
<session-dir>/mechanism-audit.md). - Sanitization: The skill does not implement specific sanitization or filtering for the data ingested during the audit process.
Audit Metadata