kernel-asset-integration-security
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or data exfiltration attempts were detected. The skill is purely informational and instructional, focusing on promoting secure development practices.
- [DATA_EXPOSURE]: The skill contains no hardcoded secrets or credentials. It explicitly instructs the agent to prevent the inclusion of secret keys in frontend code and identifies the risk of credential exposure.
- [COMMAND_EXECUTION]: There are no shell commands, subprocess calls, or scripts that execute logic. The skill consists entirely of descriptive text and security policy definitions.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any network operations or download external content. It provides guidelines on how to safely handle external assets, such as using Subresource Integrity (SRI) and version pinning, to mitigate supply chain risks.
Audit Metadata