developer-event-sponsorship
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions are focused exclusively on developer relations strategy, budgeting, and event ROI analysis. No malicious instructions, obfuscation, or unauthorized access patterns were detected.
- [SAFE]: External references and links provided in the price ladders (e.g., us.pycon.org, 2026.djangocon.us) target well-known, legitimate organizations and do not involve suspicious downloads or remote code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data such as event prospectuses and audience reports. While this presents an indirect prompt injection surface, the risk is negligible as the skill lacks high-privilege tool capabilities (e.g., arbitrary code execution, network exfiltration) and focuses on qualitative advisory tasks.
- [SAFE]: The state management mechanism (using
devrel-context.md) is a standard pattern for maintaining task context and does not constitute a persistence-based attack vector.
Audit Metadata