sequential-thinking
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides an instructional framework for 'Sequential Thinking', adapted from the official Anthropic MCP server. It teaches the agent how to break down complex tasks into logical, reflective steps.
- [COMMAND_EXECUTION]: The skill includes two Node.js scripts (
process-thought.jsandformat-thought.js) used for state management and display formatting. process-thought.jsmanages a local history file (.thought-history.json) within the skill directory. Analysis of the source code confirms it uses hardcoded paths for file operations, preventing path traversal or arbitrary file access.format-thought.jsis a pure string-formatting utility with no dangerous side effects.- [EXTERNAL_DOWNLOADS]: The
package.jsonfile includesjestas a development dependency for running included tests. This is a standard and well-known testing framework. - [DATA_EXPOSURE]: No sensitive data access or network-based exfiltration patterns were detected. The scripts only store 'thoughts' (reasoning steps) in a local JSON file to maintain context during a session.
- [PROMPT_INJECTION]: Instructions in
SKILL.mdand thereferences/directory are purely methodological and do not attempt to bypass safety filters or override system instructions.
Audit Metadata