tajemnica-preflight-pl
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill consists entirely of instructional text and metadata configuration for an AI agent to perform content auditing within a local environment.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted user input (prompts being audited), the risk is minimal due to the skill's design.
- Ingestion points: The skill ingests user-provided prompts via standard interaction for auditing purposes (SKILL.md).
- Boundary markers: The skill uses structured output templates and markdown headers to separate the analysis from the potentially malicious input content.
- Capability inventory: The skill only utilizes the
Readtool. It lacks network access, file writing, or subprocess execution capabilities. - Sanitization: The skill enforces a strict human-in-the-loop requirement ('Bramka człowieka'), requiring users to manually review and approve all outputs line-by-line before use.
- [DATA_EXFILTRATION]: The skill is explicitly designed to prevent data leakage. It contains no network tools, hardcoded credentials, or external destinations. The
pii-egress: noneanddata-residency: localsettings provide further security constraints. - [COMMAND_EXECUTION]: No shell commands, script generation, or dynamic code execution patterns were identified.
Audit Metadata