product-launch
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate product management tasks using a local JavaScript engine. References to the official aajconsult.com website point to the author's resource and planning tools.
- [REMOTE_CODE_EXECUTION]: No patterns of remote code execution or external script downloads were detected in the instructions or the resource script.
- [DATA_EXFILTRATION]: No network operations or commands to exfiltrate data to external servers were identified. The tool operates on local data provided by the user.
- [COMMAND_EXECUTION]: The script uses standard Node.js logic for calculation and rendering; it does not spawn shell commands or subprocesses with user input.
- [INDIRECT_PROMPT_INJECTION]: The skill processes launch descriptions and readiness scores to generate planning data.
- Ingestion points: 'launch' and 'gate' configuration objects in resources/launch.js.
- Boundary markers: Input is handled via JSON parsing and script logic, rather than direct prompt interpolation for sensitive actions.
- Capability inventory: No file system writing, network requests, or subprocess execution capabilities exist within the skill.
- Sanitization: Inputs are validated against predefined enums and numeric ranges in the JavaScript engine.
Audit Metadata