revenue-centric-design-principles
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of design principles and behavioral science frameworks. It does not contain any hidden or malicious code.
- [COMMAND_EXECUTION]: The Python code snippets provided in the documentation are benign utility functions intended for the agent to use to locate and read local markdown files within the skill's own directory (~/.claude/skills/revenue-centric-design/references).
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface where it ingest user queries to search its own local knowledge base (references/*.md). However, as these files are static components of the skill itself, the risk of external injection via these files is negligible.
- [EXTERNAL_DOWNLOADS]: The installation instructions reference public GitHub repositories and NPM commands (npx skills) for setup. These are standard installation procedures for the platform and do not constitute a runtime threat.
- [DATA_EXFILTRATION]: No network calls or exfiltration attempts were found. The skill operates entirely on local data using standard libraries.
Audit Metadata