tk-explain
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on generating educational HTML artifacts and does not perform any dangerous operations.
- [DATA_EXPOSURE]: The skill writes output to the
.tigerkit/directory within the workspace and includes instructions to ensure these files are ignored by Git. No unauthorized data exfiltration or credential exposure was found. - [INDIRECT_PROMPT_INJECTION]: The skill includes explicit instructions to treat external data as evidence rather than authoritative instructions, mitigating risks from untrusted input during the explanation process.
- [DYNAMIC_EXECUTION]: While the skill generates HTML containing JavaScript, the scripts are sourced from local templates in the
assets/directory and are used for benign UI enhancements like theme switching, navigation, and citation previews.
Audit Metadata