pack-shared
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation defining architectural and behavioral contracts. It does not contain executable scripts, binaries, or network-invoking commands.
- [SAFE]: The guidelines in
review-contract.mdpromote defensive security practices by instructing agents to identify and block critical vulnerabilities such as hardcoded secrets, lack of ownership checks on public writes, and insecure data handling (e.g., non-deterministic queries, un-awaited writes). - [SAFE]:
execution-context.mdenforces a stateless execution model, explicitly prohibiting agents from creating hidden registries, status files, or persistent runtime caches unless explicitly authorized by the user. - [SAFE]:
pr-ship.mdencourages the use of repository-defined linting and testing scripts before code is committed, ensuring that standard quality and security checks are executed. - [SAFE]: No patterns of prompt injection, obfuscation, data exfiltration, or unauthorized privilege escalation were detected across the analyzed files.
Audit Metadata