product-launch

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs legitimate product management tasks using a local JavaScript engine. References to the official aajconsult.com website point to the author's resource and planning tools.
  • [REMOTE_CODE_EXECUTION]: No patterns of remote code execution or external script downloads were detected in the instructions or the resource script.
  • [DATA_EXFILTRATION]: No network operations or commands to exfiltrate data to external servers were identified. The tool operates on local data provided by the user.
  • [COMMAND_EXECUTION]: The script uses standard Node.js logic for calculation and rendering; it does not spawn shell commands or subprocesses with user input.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes launch descriptions and readiness scores to generate planning data.
  • Ingestion points: 'launch' and 'gate' configuration objects in resources/launch.js.
  • Boundary markers: Input is handled via JSON parsing and script logic, rather than direct prompt interpolation for sensitive actions.
  • Capability inventory: No file system writing, network requests, or subprocess execution capabilities exist within the skill.
  • Sanitization: Inputs are validated against predefined enums and numeric ranges in the JavaScript engine.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:11 PM