sutherland-alchemy

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of markdown instructions, templates, and reference materials. It does not include executable scripts, request access to external tools, or require environment-level permissions.
  • [EXTERNAL_DOWNLOADS]: The skill documentation and metadata list several external URLs from sources like TED, LinkedIn, and behavioral science blogs. These are static references used to build the methodology and are not accessed or executed at runtime.
  • [INDIRECT_PROMPT_INJECTION]: While the agent is designed to process user-supplied business objectives, the skill provides rigid templates and a specific review checklist (checklists/review-checklist.md) to maintain the integrity of the output. The lack of tool access (e.g., shell or filesystem) effectively eliminates the risk of privilege escalation via injected content.
  • [OBFUSCATION]: A thorough check for hidden characters (zero-width), multi-layered encoding, and homoglyph substitution returned no results. The content is clear and consistent across all files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 12:08 AM