cascade
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in this skill.
- [PROMPT_INJECTION]: The instructions focus on structured task management and do not contain attempts to override safety guidelines or bypass AI constraints. The skill includes a 'TAKEOVER' branch that specifically instructs the agent to skeptically re-evaluate previous conclusions, which is a security-positive design pattern.
- [DATA_EXFILTRATION]: No unauthorized network operations or sensitive file access patterns were found. The skill uses local project documentation (docs/evidence/) for logging and verification purposes.
- [REMOTE_CODE_EXECUTION]: While the skill involves a developer workflow including code execution and testing, it does not facilitate the download or execution of scripts from unverified or remote sources. The operations are conducted within the context of the agent's provided development environment.
- [COMMAND_EXECUTION]: Command execution is limited to standard development practices (git, testing, building) as part of the intended project lifecycle. No attempts at privilege escalation or unauthorized system modification were found.
Audit Metadata