harness-build-core-manifest
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to initialize and maintain project-specific metadata files (like AGENTS_MANIFEST.md and EVENT_LOG.md). All file operations are constrained to the local directory structure.
- [COMMAND_EXECUTION]: The use of the Bash tool is limited to benign informational output (
echo) and standard file verification utilities (grep,ls,wc) mentioned in the test cases and completion steps. There are no attempts to execute arbitrary code or modify system configurations. - [DATA_EXFILTRATION]: No network-enabled tools such as
curlorwgetare used, and there is no evidence of data being transmitted to external endpoints. - [PROMPT_INJECTION]: The instructions follow a structured task-oriented workflow and do not contain any patterns indicative of prompt injection, such as attempts to bypass safety filters or ignore prior instructions.
Audit Metadata