jtbd-validator
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a localized validation tool. It does not perform network operations, exfiltrate data, or attempt to gain elevated privileges.
- [SAFE]: The validation logic is implemented in a Python script that uses
yaml.safe_load()for parsing, which effectively mitigates unsafe deserialization risks (Category 10). - [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found in the provided files.
- [SAFE]: While the skill processes external data (JTBD files), it lacks dangerous capabilities (such as network access or subprocess execution) that would make it vulnerable to indirect prompt injection (Category 8).
Audit Metadata