agile-workflow

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill consists of markdown-based instructions for orchestrating software development tasks. It does not include executable code, scripts, or suspicious external dependencies.
  • [COMMAND_EXECUTION]: The workflow utilizes standard development tools such as git and npm for repository management, testing, and building. These actions align with the skill's intended use as a development orchestrator and are performed locally.
  • [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or network communication. All operations are targeted at local project files and git structures within the user's environment.
  • [INDIRECT_PROMPT_INJECTION]: Although the skill processes untrusted code and test data, it incorporates defensive instructions to identify security vulnerabilities (e.g., hardcoded secrets, SQL injection) within that data, which serves as a security control rather than a vulnerability.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:07 PM