suede-revops
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No evidence of prompt injection or instructions to bypass safety guidelines was found. The instructions focus on RevOps best practices and provide clear boundaries for the agent.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or unauthorized network communication patterns were identified. The skill correctly identifies that it should not mutate production CRM records without approval.
- [OBFUSCATION]: No obfuscated content, encoded strings, homoglyphs, or hidden characters were detected in any of the skill files.
- [REMOTE_CODE_EXECUTION]: No patterns of remote script execution or unverifiable package installations were found. The skill does not include any executable scripts.
- [PRIVILEGE_ESCALATION]: No commands for privilege escalation (e.g., sudo, chmod) were present.
- [PERSISTENCE]: No persistence mechanisms, such as modifications to shell profiles or cron jobs, were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill includes boundary markers and explicit instructions for the agent to seek approval before performing sensitive operations, mitigating risks from processing user-supplied data.
- [DYNAMIC_CONTEXT_INJECTION]: No use of dynamic context injection syntax (
!command) was found in the SKILL.md file.
Audit Metadata