purple-ops

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a purely instructional playbook for security professionals. It does not include executable scripts, automation code, or tools that would grant the agent unauthorized access or perform dangerous operations.
  • [SAFE]: All external references target reputable security organizations and well-known services, including MITRE, Red Canary, Rabobank's CDC, and SANS. These are used to provide legitimate documentation and industry-standard tooling for threat emulation and detection mapping.
  • [SAFE]: Command examples provided (e.g., Invoke-AtomicTest) are clearly marked as examples for security validation in controlled environments and are consistent with the skill's primary purpose of purple-team operations.
  • [SAFE]: No evidence of prompt injection, obfuscation, data exfiltration, or persistence mechanisms was found. The skill adheres to best practices for structured security reporting and validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 11:01 AM