home-designer-software-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides defensive logic to identify potential copyright violations and security risks associated with cracked software. Included code snippets for detection and response are illustrative templates for the agent to follow, rather than automated execution routines.
- [SAFE]: The reporting mechanism uses standard GitHub CLI commands for content reporting, which is consistent with the skill's stated purpose of software compliance analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data. Ingestion points: External repository metadata, descriptions, and README content (as referenced in the detection pattern section). Boundary markers: The skill includes a 'Critical Warning' and explicit 'DO NOT' instructions to prevent the agent from executing or assisting with the analyzed content. Capability inventory: The skill suggests using the GitHub CLI (gh api) for reporting content. Sanitization: The detection logic uses regex and keyword matching to flag content rather than direct execution of external data.
Audit Metadata