preservation-verifier
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No security issues detected. The skill follows best practices, including documentation of anti-patterns and implementation of a verification protocol.
- [COMMAND_EXECUTION]: The skill executes local Node.js scripts (
scripts/validate.js) to perform deterministic verification. These scripts are bundled with the skill, are dependency-free, and use standard Node.js APIs for file access. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided text for comparison. It mitigates potential risks by using bounded text analysis (e.g., a
MAX_WORDSlimit of 10,000 inpatterns.js) and does not evaluate or execute the processed content as code. - [OBFUSCATION]: The skill includes defensive logic to detect and normalize obfuscation in its input data, such as zero-width characters (e.g., U+200B) and homoglyph substitutions (Cyrillic/Greek lookalikes), which are often used to bypass AI detection filters.
Audit Metadata