ns-sdd-analyze-consistency

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads project documentation (requirements.md, architecture-rules.md) and writes reports to the local filesystem. These operations are restricted to the project root and do not involve any network exfiltration or access to sensitive credentials like SSH keys or environment secrets.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from requirements.md. While it lacks explicit boundary markers for this data, the risk is negligible as the skill's capabilities are limited to generating a text-based consistency report and it does not use the ingested data to build shell commands or execute code.\n- [REMOTE_CODE_EXECUTION]: The skill lists a dependency on ns-harness, which is a local framework component from the same author. No patterns for downloading and executing remote scripts (e.g., curl|bash) were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 05:05 PM
Security Audit — agent-trust-hub — ns-sdd-analyze-consistency