armar-cerrador
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains procedural instructions for a software installation or setup workflow. It does not contain any detected malicious patterns such as credential exfiltration, remote code execution, or obfuscation.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to ingest and follow steps from external files within the project workspace, specifically
blueprint/00-mapa.mdandPINES.md. This behavior is consistent with the skill's stated purpose as a setup coordinator. - Ingestion points: The agent reads instructions from
blueprint/00-mapa.mdand versioning/model data fromPINES.md(found inSKILL.md). - Boundary markers: None explicitly defined in the provided file; the agent is instructed to follow the external files strictly.
- Capability inventory: The skill allows the agent to check for existing status files (
.wca-estado.json) and follow a multi-phase construction process which likely involves file system operations. - Sanitization: No specific sanitization or validation of the content within the referenced blueprint files is mentioned.
Audit Metadata