design-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions follow standard project management and design workflows without any identified malicious patterns or security risks.
- [DATA_EXFILTRATION]: The skill does not contain any network-facing commands (e.g., curl, wget) and does not access sensitive system files or credentials. Its file operations are limited to creating markdown documentation within the project workspace.
- [COMMAND_EXECUTION]: No shell commands, subprocess invocations, or script executions were found in the provided instructions.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data by reading existing project design documents and user descriptions, its actions are limited to generating markdown design briefs. This ingestion surface is considered safe for the skill's intended purpose as it does not influence security-critical code or network logic.
Audit Metadata