sdd-apply
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's operations are consistent with its stated purpose of managing software implementation and TDD cycles. It uses structured tool calls (get_block, update_block) to interact with a specific local storage system (PKM-AI).
- [EXTERNAL_DOWNLOADS]: The skill references a local configuration file at
~/.pkm-ai/sdd/_shared/phase-common.mdto standardize output formats. This is a local file access within the tool's own ecosystem and does not involve downloading code from untrusted remote sources. - [DATA_EXFILTRATION]: All data retrieval and storage operations are performed via authorized tool calls within the internal storage system. No patterns suggesting unauthorized network communication or sensitive data exfiltration were found.
- [PROMPT_INJECTION]: The instructions do not contain attempts to override safety filters, bypass constraints, or extract system prompts. The use of structured templates for tasks and progress reports helps maintain execution boundaries.
Audit Metadata