prompt-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a guide for prompt engineering, providing structural frameworks like CO-STAR and few-shot examples. It contains no executable scripts, subprocess calls, or network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and optimize user-provided text (prompts). While this technically constitutes an ingestion surface for indirect instructions, the skill possesses no capabilities (tools, network access, or file system access) that could be exploited by such instructions. Therefore, the risk is negligible.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or external dependency installations (npm, pip, etc.) were detected. All logic is contained within the markdown instructions.
- [DATA_EXFILTRATION]: No network tools or sensitive file access patterns are present, ensuring user data remains within the local context.
Audit Metadata