graham-net-net
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [PROMPT_INJECTION]: No malicious override patterns, jailbreak attempts, or instructions to bypass safety guardrails were detected. The skill uses standard conditional logic to define its scope and decision-making process.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive local file paths (such as .ssh or .aws directories) are present in the skill files.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any external package installations (pip, npm) or remote script executions (curl | bash). It is entirely descriptive and instruction-based.
- [OBFUSCATION]: No hidden characters, Base64-encoded commands, homoglyphs, or steganographic patterns were found. All URLs and instructions are in plain text.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process financial, market, and structural data. While it ingests external context, it lacks the necessary capabilities (such as tool invocation, file writing, or network access) to perform actions that could be exploited by malicious input data.
- [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file does not utilize any shell execution patterns or dynamic placeholders that would execute commands at load time.
Audit Metadata