security-and-hardening

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely instructional, containing documentation, checklists, and code snippets intended to guide safe development practices. No executable scripts are included with the skill.- [PROMPT_INJECTION]: No patterns associated with prompt injection, safety bypasses, or instruction overrides were detected. The skill discusses prompt injection as a threat to be mitigated in user applications.- [DATA_EXFILTRATION]: No hardcoded credentials, sensitive file access, or unauthorized network operations were found. The skill follows best practices by demonstrating secret management through environment variables.- [REMOTE_CODE_EXECUTION]: The skill does not contain commands or patterns for downloading and executing remote code. It provides warnings against unsafe practices like using eval() or unverified shell execution.- [OBFUSCATION]: No Base64, zero-width characters, homoglyphs, or other obfuscation techniques were found in the skill content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 02:24 PM