senior-prompt-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides utility scripts for prompt optimization, RAG evaluation, and agent workflow visualization that function as intended without security risks.- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded secrets, credentials, or sensitive file paths (e.g., .ssh, .aws) were detected. The scripts process local files provided via command-line arguments and do not contain network exfiltration logic.- [OBFUSCATION]: No signs of Base64 encoding, zero-width characters, homoglyphs, or other obfuscation techniques were found in any of the skill's files.- [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote code. All functionality is contained within the local Python scripts which use standard libraries for text processing and JSON/YAML parsing.- [INDIRECT_PROMPT_INJECTION]: While the tools ingest external data (prompts, RAG contexts, and agent configurations), the risk is negligible as the data is used for static analysis and metric calculation rather than being executed or passed to an LLM context in an unsafe manner.
Audit Metadata