threat-model
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of instructional Markdown files. No scripts (Python, JavaScript, shell) or configuration files that could execute code or modify the system environment are present.
- [SAFE]: All references to security-sensitive patterns—such as attack narratives, credential paths (e.g., ~/.aws/credentials), and potentially dangerous commands (e.g., curl | bash)—are used solely as educational examples or counter-examples within the documentation. These are not executed by the skill.
- [SAFE]: The skill establishes a multi-step workflow for the agent to follow when performing security audits. These instructions are designed to improve analysis quality and do not attempt to bypass safety guidelines or inject malicious behavior.
- [SAFE]: No obfuscation, data exfiltration, or persistence mechanisms were detected. The skill is transparent in its logic and structure.
Audit Metadata