rea-tool-design
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a specialized development and design assistant for the REA project. The instructions provided are entirely focused on auditing tool contracts, implementing new capabilities, and verifying workflows within a local clone of the project repository.
- [SAFE]: All command-line instructions (e.g., npm ci, npm run build, gh workflow) and environment variables (e.g., REA_LOG_LEVEL) are standard for modern JavaScript/TypeScript development and testing environments. There are no patterns suggesting malicious command execution or unauthorized privilege escalation.
- [SAFE]: The skill incorporates the project's own contribution and design guides, which explicitly define boundaries against the integration of exploit automation, credential theft, or persistence mechanisms. This reflects a security-oriented design philosophy for the toolset being managed.
- [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The skill operates on local source code and official project documentation.
Audit Metadata