lov-kill-emoji

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected.
  • [COMMAND_EXECUTION]: The skill includes Python scripts (profile_store.py, validate_skill.py) for managing local configuration and verifying skill integrity. These tools perform standard local file operations within user-controlled directories.
  • [DATA_EXPOSURE]: Accesses a local profile JSON to manage user and brand preferences. The persistence script implements an explicit filter to exclude sensitive fields such as tokens, secrets, and API keys from being stored.
  • [INDIRECT_PROMPT_INJECTION]: The workflow involves scanning project source code (JSX/components) for symbols. The provided instructions establish strict operational boundaries to ensure the agent maintains code integrity and only modifies UI elements as requested.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 04:28 PM