license-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of high-level instructions for an AI agent to perform software licensing analysis and dependency auditing. No executable code, scripts, or binary files are provided.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions include auditing project dependencies for licensing compliance. This represents a potential ingestion surface for untrusted data (dependency manifests). However, the skill lacks any capabilities to perform network requests, file writes, or system commands, mitigating the risk.
- Ingestion points: Dependency manifests and project metadata.
- Boundary markers: None specified.
- Capability inventory: None detected.
- Sanitization: Not specified.
- [DATA_EXFILTRATION]: There are no network-capable commands (e.g., curl, wget, fetch) or instructions to transmit data to external endpoints.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets were found in the skill metadata or instructions.
- [OBFUSCATION]: The content is clear and uses standard Markdown formatting. No Base64, zero-width characters, or homoglyph attacks were detected.
Audit Metadata