inner-world
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses instructional language to define operational boundaries, such as restricting usage to specific user requests and prohibiting initiative-taking. These are legitimate constraints for a specialized creative tool and do not attempt to bypass core safety guidelines.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive local file paths (e.g., SSH keys, environment variables) were found. The skill operates entirely within the context of creative prompt generation.
- [OBFUSCATION]: The content is presented in clear, human-readable Markdown. No Base64, zero-width characters, homoglyphs, or other obfuscation techniques are used.
- [REMOTE_CODE_EXECUTION]: The skill does not include any commands for downloading or executing external scripts, nor does it define any package dependencies.
- [DYNAMIC_CONTEXT_INJECTION]: No use of shell execution syntax (e.g.,
!command) was detected in the configuration or instructions. - [COMMAND_EXECUTION]: The skill is purely descriptive and does not invoke system-level commands or subprocesses.
Audit Metadata