skills/phenomenoner/xq-xs-skill/xq-xs/Gen Agent Trust Hub

xq-xs

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily instructional and provides high-quality guidelines for code review and development without any malicious patterns.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions for using the GitHub CLI (gh) to list file structures from official repositories under the sysjust-xq organization. These are well-known sources for the XQ platform and the operations are purely informational.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to ingest and review user-provided scripts, it lacks dangerous execution capabilities (such as shell access or network exfiltration tools) that would make an injection attack exploitable. The surface area is consistent with a standard coding assistant.
  • [NO_CODE]: The skill package consists of Markdown documentation and YAML configuration files, with no included executable scripts or compiled binaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:06 PM