xq-xs
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional and provides high-quality guidelines for code review and development without any malicious patterns.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions for using the GitHub CLI (
gh) to list file structures from official repositories under thesysjust-xqorganization. These are well-known sources for the XQ platform and the operations are purely informational. - [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest and review user-provided scripts, it lacks dangerous execution capabilities (such as shell access or network exfiltration tools) that would make an injection attack exploitable. The surface area is consistent with a standard coding assistant.
- [NO_CODE]: The skill package consists of Markdown documentation and YAML configuration files, with no included executable scripts or compiled binaries.
Audit Metadata