vibe-sunsang-knowledge
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill reads a local configuration file from a vendor-specific path:
$HOME/vibe-sunsang/config/workspace_types.json. This is used to determine the user's workspace context and is a legitimate use of project-specific configuration data. - [SAFE]: The skill utilizes the
AskUserQuestiontool for interactive flow control when user requests are vague or when workspace types need to be identified. This is a standard and secure implementation of conversational logic. - [SAFE]: All external links provided in the reference documentation point to reputable educational, academic, and technology industry sources such as Stanford University, IEEE Spectrum, and IBM. These are used strictly for informational purposes.
- [SAFE]: The skill contains examples of security anti-patterns (such as hardcoded API keys) as educational warnings for the user; these are clearly marked as bad practices and do not constitute actual credential exposure within the skill's own code.
Audit Metadata