lov-fix-by-add-log
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill uses a local profile management script (
scripts/profile_store.py) to persist user-stated context. It contains logic to block the storage of sensitive fields such as tokens, secrets, passwords, and API keys within the persistent profile JSON, mitigating the risk of accidental credential exposure. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user logs and source code as part of its core functionality. It addresses the associated risks by defining a clear execution boundary and providing explicit instructions in the
SKILL.mdworkflow to desensitize sensitive information (e.g., passwords and tokens) before logging occurs. - [DYNAMIC_EXECUTION]: The validation script (
scripts/validate_skill.py) usesyaml.safe_load()when parsing manifest and frontmatter data. This avoids unsafe deserialization vulnerabilities that could be triggered by processing malicious configuration files. - [COMMAND_EXECUTION]: While the skill interacts with the host CLI to perform debugging, its instructions emphasize maintaining the integrity of the user's environment, such as protecting uncommitted changes and avoiding the termination of user processes without explicit authorization.
Audit Metadata