skills/ryanthedev/oberskills/agent/Gen Agent Trust Hub

agent

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation resource providing orchestration patterns and dispatch guidance for AI subagents. It defines a structured approach for decomposing tasks and managing context isolation without introducing malicious instructions.- [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses the risk of indirect prompt injection through URL-embedded content in tool outputs. It provides mitigation strategies, such as stripping URL fragments/anchors and using schema gates for untrusted inputs to prevent the agent from following malicious instructions hidden in external data.- [REMOTE_CODE_EXECUTION]: The documentation mentions the creation of 'init.sh' files and the execution of build/test scripts. These are described as standard components of a coordinated developer workflow for managing state across sessions or verifying code artifacts, and do not involve fetching or executing untrusted code from remote sources.- [COMMAND_EXECUTION]: The skill references the use of tools like 'Bash' for running tests, lints, and builds in a verifier role. This is a standard and intended use case for development-oriented agents, and the skill emphasizes using these tools for deterministic checks before applying LLM judgment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 03:36 AM