pitch-deck
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
run_shell_commandtool and defines anExecutionProxy Interface(using thertkprefix) for executing terminal actions such asnpm test. These operations are consistent with the framework's stated goal of deterministic execution and test-driven development. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect injection as it ingests data from
founder-context.mdand mentions handling web content. It possesses potentially dangerous capabilities likerun_shell_commandandwrite_file. However, the risk is mitigated by explicit security protocols requiring the redaction of secrets and PII, and instructions to treat all external data as hostile. - [SAFE]: The skill adheres to vendor-specific protocols (Galyarder Labs) and does not contain obfuscated code, unauthorized data exfiltration patterns, or attempts to bypass agent safety guidelines.
Audit Metadata