windsurf-known-pitfalls
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats detected. The skill instructions are purely informational and aimed at improving developer workflows and security posture.
- [SAFE]: The skill explicitly advises against security risks, such as pasting secrets into AI chat (Pitfall 9) and using unsafe automated command execution without a deny list (Pitfall 10).
- [SAFE]: The included bash script examples are limited to local diagnostics (checking Git status, character counts of rule files, and listing extensions) and do not involve network access or privilege escalation.
- [SAFE]: External URLs point to official documentation and resources for the Windsurf IDE.
Audit Metadata