ywh-gotchas
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of reference text in Markdown format providing triage instructions.
- [SAFE]: No external dependencies, package installations, or remote code execution patterns were found.
- [SAFE]: Security-related strings, such as common attack payloads (e.g.,
alert(document.domain)) and sensitive file paths (e.g.,/etc/passwd), are used strictly for documentation and as examples of evidence required for vulnerability reports. - [SAFE]: Placeholder secret patterns like
sk_test_...are mentioned as examples of false positives (Common N/A) and do not represent leaked credentials. - [SAFE]: The skill does not define or use any tools or scripts, which prevents it from being used as a functional attack vector.
Audit Metadata