agile-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of markdown-based instructions for orchestrating software development tasks. It does not include executable code, scripts, or suspicious external dependencies.
- [COMMAND_EXECUTION]: The workflow utilizes standard development tools such as
gitandnpmfor repository management, testing, and building. These actions align with the skill's intended use as a development orchestrator and are performed locally. - [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or network communication. All operations are targeted at local project files and git structures within the user's environment.
- [INDIRECT_PROMPT_INJECTION]: Although the skill processes untrusted code and test data, it incorporates defensive instructions to identify security vulnerabilities (e.g., hardcoded secrets, SQL injection) within that data, which serves as a security control rather than a vulnerability.
Audit Metadata