developer-office-hours-program
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill contains only Markdown documentation and templates. There are no scripts, executables, or configuration files that trigger code execution.
- [SAFE]: The skill provides explicit instructions for maintaining security and privacy during program execution. This includes reviewing screen-shares for sensitive data (tokens, internal hostnames, customer names), revoking leaked API keys (referencing official vendor guidance), and implementing a 'no logs, keys or customer data' rule for public intake threads.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from users (questions from chat, forums, and forms). However, it includes significant mitigations such as a defined scope card that redirects sensitive topics (vulnerabilities, account issues) to private channels, mandatory note-taking by a second party for review, and a redaction path for moderators. Given the skill's purpose as a design framework with no automated tool execution, this surface is considered low risk.
Audit Metadata