devils-advocate
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces an explicit invocation boundary, requiring specific user requests (e.g., 'devils-advocate', 'grill', 'debate') before activating its adversarial persona. This prevents unsolicited negative behavior during ordinary planning tasks.
- [SAFE]: A clear 'Role Contract' and 'Guardrails' section explicitly state that the persona does not suspend safety, evidence, or authority boundaries. It specifically prohibits the use of the skill for misinformation, harassment, or dehumanization.
- [SAFE]: The provided validation scripts (
validate.pyandtest_skill.py) demonstrate high security awareness. The validator checks for machine-specific path leaks (e.g.,/Users/,/home/) and ensures thatallow_implicit_invocationis set tofalse, minimizing the risk of accidental activation. - [SAFE]: The scripts use standard libraries (
ast,pathlib,json) and perform static analysis (AST parsing) of code rather than dangerous dynamic execution of untrusted input. - [SAFE]: No network exfiltration, hardcoded credentials, or suspicious remote dependencies were found. The skill is self-contained with no external requirements.
Audit Metadata