startup-communities
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected in this skill. The skill provides informational resources, templates, and a simple local validation script.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user input regarding location and target communities to generate a personalized startup community plan. This is a standard functional surface. The skill does not possess capabilities that would allow for exploitation via this vector, such as network access or file system modifications beyond reading the generated deliverable.
- Ingestion points: User input for location and community targets in
SKILL.md. - Boundary markers: None explicitly defined, but the output is guided by a fixed template.
- Capability inventory: A simple Python script
scripts/check-output.pythat reads a local file to validate keyword presence. - Sanitization: Not applicable as the skill does not execute code based on user-supplied text.
Audit Metadata