engineering

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents a comprehensive software development lifecycle emphasizing design review, test-first implementation, and security verification via an 'appsec' gate.
  • [COMMAND_EXECUTION]: The skill references platform-specific tools like skill-gate and skill-readme for automated validation and documentation management. These commands are integral to the workflow and do not involve untrusted remote execution.
  • [CREDENTIALS_UNSAFE]: The skill includes explicit security guidelines advising against hardcoding secrets in manifests or logs, recommending the use of secret managers instead.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found; the skill explicitly mandates checking untrusted data at the boundary before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 07:15 PM
Security Audit — agent-trust-hub — engineering