review-product-flow
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and associated files do not contain any malicious patterns such as prompt injections, obfuscation, or data exfiltration. The skill follows established development practices for automated and manual testing workflows.
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/review-product-flow) to perform various tasks like rendering reports and initializing data files. The script uses only Python standard library modules and operates within the local project environment. - [REMOTE_CODE_EXECUTION]: The skill includes functionality to start a local development server for human verification. This server is strictly bound to the loopback interface (
127.0.0.1) and incorporates a token-based authentication mechanism to ensure it is only accessible to the local user process. - [DATA_EXPOSURE]: The skill processes project-related files such as requirements and design documents to generate test cases. It manages data locally in a
.skills/directory and does not perform any external network operations beyond the loopback interface.
Audit Metadata