cold-start-interview
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows its stated purpose of environment configuration.
- [COMMAND_EXECUTION]: The skill executes a bundled Python script (
scripts/lode_raw.py) to register projects in the knowledge vault. The script performs structured JSON updates and basic path validation; it was reviewed and found to handle files safely without shell injection or dangerous execution patterns. - [EXTERNAL_DOWNLOADS]: The skill does not perform any network requests or downloads.
- [CREDENTIALS_UNSAFE]: The instructions explicitly state "Never store secrets, credentials, or remote sync tokens." No hardcoded credentials were found.
- [PROMPT_INJECTION]: No attempts to bypass safety filters or override agent behavior were detected. The skill uses standard instructional language for its interview process.
- [DATA_EXFILTRATION]: No network activity or sensitive data exfiltration patterns were found. Data management is strictly local to the user's filesystem.
Audit Metadata