render-qa-and-surgical-changes

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions and associated reference material do not contain any malicious patterns such as prompt injection, obfuscation, or persistence mechanisms.
  • [COMMAND_EXECUTION]: The skill references several internal repository scripts (e.g., scripts/probe_media.py, scripts/extract_proof_frames.py). These scripts are used within the context of video processing workflows (media probing, frame extraction) and do not appear to handle untrusted input or execute arbitrary system commands.
  • [DATA_EXFILTRATION]: No network operations or unauthorized access to sensitive files (credentials, system configs) were detected. The file operations are limited to project assets and QA artifacts.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (video files, scripts, and user requests), it establishes a controlled workflow with specific stop conditions for ambiguous or conflicting changes. The attack surface for indirect injection is low given the specialized nature of the processing scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 08:25 PM