audit-resilience
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
rg(ripgrep) to perform local filesystem searches across various file types (.ts, .py, .js, etc.). These commands are used to inventory external API calls, database mutations, and logging practices. This behavior is consistent with the skill's purpose as an auditing tool. - [DATA_EXFILTRATION]: While the skill searches for strings representing sensitive information (e.g., 'password', 'token', 'ssn', 'card') to audit logging practices, it does not include any network operations to send this data externally. All operations are local and read-only.
- [PROMPT_INJECTION]: The skill includes behavioral instructions (e.g., 'Forbidden: claiming production-readiness from passing tests alone') which are standard operational constraints for the AI agent and do not constitute malicious injection or attempts to bypass safety protocols.
- [SAFE]: The skill functions as a diagnostic and reporting tool that performs read-only analysis of local files. It does not modify the filesystem, install external packages, or execute remote code.
Audit Metadata