verification-before-completion
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
utilities/skill-builder/scripts/record_skill_feedback.pyto persist feedback regarding the agent's decisions. This is an internal operational procedure for quality analytics. - [DATA_EXFILTRATION]: The skill includes explicit security constraints to redact secrets, tokens, and PII from shared logs, demonstrating good security practice.
- [PROMPT_INJECTION]: Instructions are instructional and corrective (e.g., 'NEVER claim completion from memory'), designed to improve reliability rather than bypass safety filters or override agent behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill processes command output which could potentially contain untrusted content.
- Ingestion points: Command output from verification steps in
SKILL.md. - Boundary markers: Not explicitly defined for the command output ingestion.
- Capability inventory: Execution of shell commands for verification and feedback recording in
SKILL.md. - Sanitization: Instructions to redact secrets and PII are explicitly provided.
Audit Metadata