gemini
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of Markdown and JSON configuration files providing instructional guidance. No executable scripts, binaries, or shell commands are included.
- [DATA_EXPOSURE]: No sensitive file paths, environment variables, or hardcoded credentials were found in the provided files.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or packages.
- [PROMPT_INJECTION]: The instructions do not contain any attempts to override safety filters or bypass agent constraints.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process external source packs, it explicitly mandates the use of boundary markers and source labeling to mitigate injection risks. Furthermore, the skill lacks any privileged capabilities that could be exploited through malicious data.
Audit Metadata