p0-needs-orchestrator
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access mechanisms were detected. The skill's primary function is to guide the LLM through a specific reasoning chain for product design.
- [NO_CODE]: The skill consists entirely of Markdown instructions and methodology descriptions. It does not include any Python scripts, Node.js code, shell commands, or external dependencies.
- [EXTERNAL_DOWNLOADS]: The skill references a GitHub repository (
github.com/gmaxxxie/ai-native-product-agent-skills) which belongs to the skill's author. This is used for documentation purposes and does not involve automated code execution or downloading untrusted content. - [COMMAND_EXECUTION]: There are no commands or shell scripts present in the skill. The orchestrator logic is handled entirely within the LLM's natural language processing context.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied product ideas. While it lacks explicit boundary markers (e.g., XML tags) to encapsulate user input, the risk is negligible as the skill possesses no dangerous capabilities such as file system writes, network requests, or tool invocations that could be exploited by an injection attack.
Audit Metadata