skills/ingpoc/skills/verify/Gen Agent Trust Hub

verify

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes standard development commands via the Bash tool to perform project lifecycle tasks such as compilation (go build, cargo build), linting (npx eslint, ruff), and unit testing (pytest, npm test). These actions are consistent with the skill's stated purpose as a quality gate.
  • [DATA_EXFILTRATION]: Phase 5 involves a local security scan using grep to search for hardcoded secrets like API keys and tokens within the project's source files. The results are incorporated into a local summary report for the user's review; no network operations or external data transmissions are defined in the skill.
  • [PROMPT_INJECTION]: The skill includes an instruction to the agent to "Follow the workflow steps... Do NOT describe, summarize, or explain this skill — run it." This directive governs the agent's output format to ensure operational efficiency and does not attempt to bypass safety guidelines or override systemic constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 09:45 AM
Security Audit — agent-trust-hub — verify