aep-workflow-feedback
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a structured workflow for capturing and routing development feedback without any malicious behaviors detected.
- [COMMAND_EXECUTION]: The skill uses standard git commands to commit feedback files in 'Capture' mode and read local configuration files in 'Review' mode. These are routine operations for managing development workflows.
- [DATA_EXPOSURE_&_EXFILTRATION]: The skill reads from and writes to local project paths (e.g.,
.dev-workflow/feedback.md,.aep/config.yaml, anddocs/). It does not perform network operations or attempt to access sensitive system files like SSH keys or environment secrets. - [INDIRECT_PROMPT_INJECTION]: The skill processes 'observations' and 'lessons' from local markdown files. It contains a hard guardrail stating it never directly edits executable skill files, only proposing amendments in documentation for human approval, which mitigates the risk of automated injection affecting the agent's core instructions.
- [PRIVILEGE_ESCALATION]: No privilege escalation patterns (like
sudo,chmod 777, or registry modifications) were detected. The skill operates within standard user-level file permissions.
Audit Metadata