ml4t-agent-tool-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill serves as a guide for developers to build typed tool contracts with strict validation and provenance tracking.
- [PROMPT_INJECTION]: No patterns attempting to override agent behavior or bypass safety filters were found. The content explicitly warns against prompt-mediated security policies.
- [DATA_EXFILTRATION]: There are no commands or code that access sensitive local files or perform network requests to external domains.
- [REMOTE_CODE_EXECUTION]: The skill does not include any external dependencies or remote script execution patterns. The provided Python snippets are illustrative examples of path sanitization.
- [OBFUSCATION]: The content is presented in clear, plain-text markdown with no signs of encoding, hidden characters, or homoglyph attacks.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies indirect prompt injection as a threat and provides implementation patterns (such as path validation and result provenance) to defend against it.
Audit Metadata