verify-witness
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a focused functionality for signature verification using the Ed25519 algorithm. Analysis shows no evidence of obfuscation, remote code downloads, or suspicious data access.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from the .harness/witness.json file, creating a theoretical attack surface for indirect prompt injection. Ingestion points: .harness/witness.json. Boundary markers: Absent. Capability inventory: Execution of local CLI verification tool. Sanitization: Absent (inherent to verification logic).
Audit Metadata