gamma-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The prod-verify.sh script executes a curl command to verify API connectivity. This is a standard health check utility for deployment verification.
  • [DATA_EXFILTRATION]: The verification script performs a network request to https://api.gamma.app/v1/ping. This operation is consistent with the skill's primary purpose of managing a Gamma service integration.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as an audit tool that processes external evidence and owner decisions.
  • Ingestion points: The skill ingests manual responses, evidence, and owner decisions provided by the user during the audit process in SKILL.md.
  • Boundary markers: No explicit delimiters are used for user-provided data.
  • Capability inventory: Includes shell execution via curl and file manipulation via Read, Write, Edit, and Grep tools.
  • Sanitization: The instructions explicitly mandate the exclusion and redaction of private content and credentials from the final go-live receipt.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:45 AM