verify-external-claims
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill uses Unicode escapes (\u003c and \u003e) as placeholders within URL templates in references/verification-sources.md. This is a documentation formatting choice and does not constitute malicious obfuscation.
- [EXTERNAL_DOWNLOADS]: The skill references several official and well-known technology documentation sites and package registries, including GitHub, pkg.go.dev, npmjs.com, pypi.org, and crates.io, for the purpose of verifying claims.
- [COMMAND_EXECUTION]: Instructions guide the agent to use bash to verify CLI tool availability and behavior (e.g., running --help). This is the intended purpose of the skill.
- [REMOTE_CODE_EXECUTION]: The skill suggests compiling and running minimal code snippets locally to verify API signatures and behaviors as part of a verification workflow.
- [SAFE]: The skill references the library github.com/larsartmann/go-error-family, which belongs to the skill's author, as a verified example.
Audit Metadata