kelly-instructor-sourcing
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a sandbox-only environment with deterministic mock data for its initial version, minimizing the risk of accidental live data exposure.
- [SAFE]: Data persistence is handled via Busabase using the official SDK. All writes are performed through ChangeRequests, ensuring a human-in-the-loop review process before data is materialized.
- [SAFE]: The application follows platform security requirements, such as avoiding localStorage for sensitive data and using a server-side OAuth gateway for authentication.
- [SAFE]: HTML output is properly escaped using a dedicated escapeHtml function, mitigating potential Cross-Site Scripting (XSS) or indirect prompt injection via candidate profiles.
- [SAFE]: Dependencies are restricted to well-known, versioned packages from the NPM registry.
Audit Metadata