duo-ml-in-production
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists exclusively of educational and architectural documentation in Markdown format. There are no scripts, executables, or code snippets that perform actions on the host system.
- [NO_CODE]: No source code (Python, JavaScript, shell scripts, or other executable files) is included in the skill package, significantly reducing the attack surface to zero for typical execution-based threats.
- [SAFE]: No hardcoded secrets, API keys, or private credentials were found. Any identifiers mentioned in the text are conceptual examples or historical context from cited blog posts.
- [SAFE]: The skill does not perform any automatic downloads or network requests. URL references are restricted to plain-text citations of the Duolingo engineering blog.
- [SAFE]: No evidence of prompt injection attempts or instructions intended to override agent behavior was detected in the SKILL.md or the reference documents.
Audit Metadata