purple-ops
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a purely instructional playbook for security professionals. It does not include executable scripts, automation code, or tools that would grant the agent unauthorized access or perform dangerous operations.
- [SAFE]: All external references target reputable security organizations and well-known services, including MITRE, Red Canary, Rabobank's CDC, and SANS. These are used to provide legitimate documentation and industry-standard tooling for threat emulation and detection mapping.
- [SAFE]: Command examples provided (e.g.,
Invoke-AtomicTest) are clearly marked as examples for security validation in controlled environments and are consistent with the skill's primary purpose of purple-team operations. - [SAFE]: No evidence of prompt injection, obfuscation, data exfiltration, or persistence mechanisms was found. The skill adheres to best practices for structured security reporting and validation.
Audit Metadata