opentide-detection-rule
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a structural framework for detection engineering, providing templates for YAML-based security rules. It does not include any executable scripts, remote downloads, or hidden commands.
- [SAFE]: No evidence of prompt injection or obfuscation was found. The instructions use standard natural language to guide the AI agent in formatting data for security analysts.
- [SAFE]: While the skill involves processing external security data (DOM signals and tenant configurations), it focuses on template creation and does not introduce malicious autonomy or exfiltration vectors.
- [SAFE]: All referenced technical terms (KQL, SPL, etc.) and platforms (Sentinel, Splunk, Defender) are standard in the cybersecurity industry and used within their intended context.
Audit Metadata