tech-due-diligence
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of markdown text providing instructions, checklists, and templates for a technical due diligence process. It does not include any executable scripts, shell commands, or configurations for external tools.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data provided by the user (such as security audit reports or codebase metrics). While this presents a surface for indirect prompt injection, the skill lacks any automated capabilities, network access, or write permissions that could be leveraged by an attacker. The analysis remains confined to the agent's reasoning process.
- [DATA_EXPOSURE]: The instructions guide the user to request and review sensitive information (IP filings, infrastructure costs, security logs). The skill provides a template for manual reporting and does not include any automated mechanisms for exfiltrating or improperly accessing this data.
Audit Metadata