blueprint-status
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to provide a status report on a project's 'blueprint' configuration. It performs read-only operations on local project files such as
manifest.json,feature-tracker.json, and documentation in thedocs/directory. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute standard utilities includingjqfor JSON parsing,grepfor pattern searching, andwcfor line counting. These operations are used appropriately for data extraction and statistics gathering within the local project context. - [DATA_EXPOSURE]: The skill accesses local configuration files and documentation to report on project health. There is no evidence of network exfiltration, hardcoded credentials, or access to sensitive system directories (e.g.,
.ssh,.aws). - [PROMPT_INJECTION]: No instructional overrides, role-play injections, or attempts to bypass safety filters were identified in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations to fetch external scripts or packages. It references other local commands within the same ecosystem (e.g.,
/blueprint:upgrade) for maintenance tasks.
Audit Metadata