feature-spike
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill includes defensive instructions to prevent the exposure of sensitive data. It explicitly forbids copying raw production data, credentials, or personal information into fixtures. It mandates the use of synthetic or anonymized data and requires that credentials remain within approved local mechanisms.
- [COMMAND_EXECUTION]: The skill is designed to generate 'runnable probes' to test technical feasibility. To mitigate risk, instructions require these probes to be kept isolated and easy to inspect, focusing only on the specific logic needed for evidence.
- [REMOTE_CODE_EXECUTION]: The skill facilitates testing integration boundaries with external services. It mitigates risk by requiring the agent to identify active environments before making calls and obtaining explicit user approval for any mutations or resource creation.
- [PROMPT_INJECTION]: The skill processes untrusted data from external dependency boundaries (Ingestion points: APIs and resource shapes in 'references/evidence-strategies.md'). It establishes boundary markers by requiring identification of environments and definition of invalid conditions ('SKILL.md'). It relies on the agent's standard capability inventory for network and file access, but mandates strict sanitization and anonymization of all external content ('SKILL.md').
Audit Metadata