security-audit
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risks of processing untrusted data from repositories and websites, including a specific instruction to treat all target content as untrusted and to never follow instructions found within the audit target.
- [DATA_EXFILTRATION]: The safety boundary explicitly prohibits the transmission of repository content, secrets, or findings to third parties, ensuring that browser automation and advisory research are restricted to authoritative or user-supplied targets.
- [CREDENTIALS_UNSAFE]: The instructions mandate that the agent must not dump credentials, environment variables, or configuration files, requiring fully redacted values or simple presence indicators for identified secrets.
- [COMMAND_EXECUTION]: The skill is defined as diagnostic and read-only, with explicit prohibitions against running exploit payloads, destructive fuzzing, persistence tests, or denial-of-service checks.
Audit Metadata