blueprint-status

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is to provide a status report on a project's 'blueprint' configuration. It performs read-only operations on local project files such as manifest.json, feature-tracker.json, and documentation in the docs/ directory.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard utilities including jq for JSON parsing, grep for pattern searching, and wc for line counting. These operations are used appropriately for data extraction and statistics gathering within the local project context.
  • [DATA_EXPOSURE]: The skill accesses local configuration files and documentation to report on project health. There is no evidence of network exfiltration, hardcoded credentials, or access to sensitive system directories (e.g., .ssh, .aws).
  • [PROMPT_INJECTION]: No instructional overrides, role-play injections, or attempts to bypass safety filters were identified in the instructions.
  • [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations to fetch external scripts or packages. It references other local commands within the same ecosystem (e.g., /blueprint:upgrade) for maintenance tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 04:18 PM
Security Audit — agent-trust-hub — blueprint-status