sequential-thinking

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides an instructional framework for 'Sequential Thinking', adapted from the official Anthropic MCP server. It teaches the agent how to break down complex tasks into logical, reflective steps.
  • [COMMAND_EXECUTION]: The skill includes two Node.js scripts (process-thought.js and format-thought.js) used for state management and display formatting.
  • process-thought.js manages a local history file (.thought-history.json) within the skill directory. Analysis of the source code confirms it uses hardcoded paths for file operations, preventing path traversal or arbitrary file access.
  • format-thought.js is a pure string-formatting utility with no dangerous side effects.
  • [EXTERNAL_DOWNLOADS]: The package.json file includes jest as a development dependency for running included tests. This is a standard and well-known testing framework.
  • [DATA_EXPOSURE]: No sensitive data access or network-based exfiltration patterns were detected. The scripts only store 'thoughts' (reasoning steps) in a local JSON file to maintain context during a session.
  • [PROMPT_INJECTION]: Instructions in SKILL.md and the references/ directory are purely methodological and do not attempt to bypass safety filters or override system instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 01:36 AM
Security Audit — agent-trust-hub — sequential-thinking