armar-cerrador

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains procedural instructions for a software installation or setup workflow. It does not contain any detected malicious patterns such as credential exfiltration, remote code execution, or obfuscation.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to ingest and follow steps from external files within the project workspace, specifically blueprint/00-mapa.md and PINES.md. This behavior is consistent with the skill's stated purpose as a setup coordinator.
  • Ingestion points: The agent reads instructions from blueprint/00-mapa.md and versioning/model data from PINES.md (found in SKILL.md).
  • Boundary markers: None explicitly defined in the provided file; the agent is instructed to follow the external files strictly.
  • Capability inventory: The skill allows the agent to check for existing status files (.wca-estado.json) and follow a multi-phase construction process which likely involves file system operations.
  • Sanitization: No specific sanitization or validation of the content within the referenced blueprint files is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 08:00 PM
Security Audit — agent-trust-hub — armar-cerrador