skills/iskron-ai/skills/iskron/Gen Agent Trust Hub

iskron

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes common developer utilities like git, docker, and gh to interact with the project repository and infrastructure. It also executes a local Node.js diagnostics script.
  • [DYNAMIC_EXECUTION]: Includes a self-maintenance command (node update) that allows the bridge component of the tool to update itself, which is a standard feature for local development CLI tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as project metadata files and remote graph databases. It mitigates injection risks by enforcing human confirmation for state changes and providing specific verification protocols like integrity and alignment checks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 12:41 PM