figure-it-out
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions do not contain any patterns intended to bypass safety filters, override agent behavior, or extract system prompts. The language is purely instructional and task-oriented.
- [DATA_EXFILTRATION]: No network operations, data exfiltration patterns, or attempts to access sensitive file paths (such as credentials or SSH keys) were detected.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or secrets are present in the skill metadata or body.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote script downloads or execution (e.g., curl-to-bash). All referenced 'skills' are internal procedural pointers within the author's ecosystem.
- [OBFUSCATION]: No evidence of Base64 encoding, hex escapes, zero-width characters, or homoglyph attacks was found in the content.
- [COMMAND_EXECUTION]: The skill defines workflows but does not invoke dangerous shell commands or attempt to acquire elevated privileges (e.g., sudo).
- [INDIRECT_PROMPT_INJECTION]: While the skill involves auditing artifacts, it does not define an ingestion surface for untrusted external data that is then interpolated into sensitive execution contexts.
Audit Metadata