state-management
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of internal platform primitives for state management, such as
state::set,state::get, andstate::update. These functions are used for typical application state persistence and do not involve unauthorized data access or exfiltration.- [PROMPT_INJECTION]: The skill facilitates the ingestion of data from an external state store viastate::getandstate::list(defined inSKILL.md). This constitutes an indirect prompt injection surface. 1. Ingestion points:state::getandstate::listtriggers. 2. Boundary markers: None specified in the instructions. 3. Capability inventory: The skill permits write operations includingstate::set,state::update, andstate::delete. 4. Sanitization: No explicit sanitization or validation of retrieved data is described. This surface is considered a standard feature of state management and is assessed as safe in the absence of malicious instructions.
Audit Metadata