moai-workflow-spec
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or persistence mechanisms were detected in the analyzed files. The skill focuses on workflow standardization and documentation.
- [DATA_EXFILTRATION]: Files like
references/examples.mdcontain example configurations with placeholder credentials (e.g.,<RSA_PRIVATE_KEY>,pm_visa_1234). These are for illustrative purposes and do not expose actual sensitive data or credentials. - [COMMAND_EXECUTION]: The skill uses basic file system and version control commands (e.g.,
mkdir,mv,find,git) for local project maintenance and migration tasks. These operations are within the scope of a development workflow tool. - [PROMPT_INJECTION]: The skill facilitates the creation of specifications from user input. It includes defensive measures such as EARS (Easy Approach to Requirements Syntax) formatting requirements and validation checklists to ensure requirements are atomic and unambiguous, reducing the surface for indirect prompt injection.
Audit Metadata