context-engine

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill accesses a local file at ~/.claude/company-context.md containing sensitive business data such as revenue, burn rates, and runway. This is the intended purpose of the skill for maintaining session context.
  • [DATA_EXFILTRATION]: The skill explicitly defines 'Privacy Rules' and an 'Anonymization Protocol' in references/anonymization-protocol.md. Internal instructions mandate that the agent must strip or generalize sensitive figures (e.g., converting specific ARR to ranges) before any data leaves the local environment via external tool or API calls.
  • [COMMAND_EXECUTION]: The skill does not contain executable scripts or shell commands. It uses natural language instructions to guide the agent's interaction with the file system and external tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 07:03 PM
Security Audit — agent-trust-hub — context-engine