Skills
Navigate
skills/moh-obaida/readyvibe-skills/payments-readiness/Gen Agent Trust Hub

payments-readiness

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs local command execution by running a bundled utility script (scripts/scan-secrets.mjs) which uses node:child_process.execFileSync to invoke the system git command for determining the tracked status of files.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted source code and configuration files, presenting a surface for indirect prompt injection.
  • Ingestion points: Project files and source code read by the agent and scripts/scan-secrets.mjs.
  • Boundary markers: The SKILL.md file defines a labeling system (OBSERVED, SOURCE-INDICATED, etc.) for the agent to categorize audit evidence.
  • Capability inventory: Filesystem read access and execution of the git command via scripts/scan-secrets.mjs.
  • Sanitization: The scripts/scan-secrets.mjs script redacts detected secret values (keeping only the first 4 characters) before outputting results to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 07:44 AM