develop-spike-summary
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown and JSON configuration files (
SKILL.md,TEMPLATE.md,EXAMPLE.md,HISTORY.md,trigger-fixtures.json). There are no executable scripts (Python, JavaScript, Shell) or command-line instructions provided. - [SAFE]: Detailed analysis of the instructions, metadata, and examples revealed no security concerns. The skill focuses solely on project management and coordination tasks without requesting dangerous permissions or external network access.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were detected. While the examples mention Stripe and Adyen APIs, they only reference public version numbers and documentation, not sensitive tokens.
- [DATA_EXFILTRATION]: There are no patterns involving data collection or transmission. The skill does not use tools like
curl,wget, or any file system access commands. - [PROMPT_INJECTION]: The instructions follow standard formatting and do not contain directives to bypass safety filters, extract system prompts, or override agent behavior.
Audit Metadata