tracer-prototype
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions facilitate standard software engineering prototyping workflows for logic (Terminal User Interfaces) and UI (web components).
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill explicitly mandates security-conscious behavior by instructing the agent to use in-memory state instead of real databases and to avoid persistent storage unless specifically required for the prototype's purpose.
- [REMOTE_CODE_EXECUTION]: The skill generates local code intended to be executed via the project's existing task runners (e.g., pnpm, bun, python). It does not include instructions to download external scripts or execute commands from untrusted remote sources.
- [PROMPT_INJECTION]: No malicious prompt injection patterns, such as instructions to ignore safety filters or override system behavior, were detected.
- [OBFUSCATION]: The skill content is clear and uses standard technical language. No hidden characters, Base64-encoded payloads, or obfuscated URLs were found.
- [COMMAND_EXECUTION]: The skill uses dynamic context only for standard development tasks (e.g., project task runners) and follows the project's established conventions without requesting escalated privileges.
Audit Metadata