sodax-build
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is restricted to ideation and product brief generation. It does not perform any dangerous actions such as remote code execution, credential handling, or persistent system modifications.
- [SAFE]: External communication is limited to instructions for the agent to fetch configuration data from the official repository of the project (github.com/icon-project/sodax-sdks), ensuring data accuracy and legitimacy from a vendor-controlled source.
- [SAFE]: File writing is strictly limited to a designated
./product-briefs/directory and utilizes a slug-based naming scheme with collision handling to prevent accidental overwriting of existing files. - [SAFE]: The skill implements a "STOP gate" mechanism that ensures the ideation flow is bypassed if the user is already technically proficient and has specific developer goals, maintaining proper operational boundaries.
- [NO_CODE]: The skill explicitly states it does not write application code or scaffold repositories, instead delegating these tasks to specific developer-focused skills.
Audit Metadata