kid-authoring
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions do not contain any patterns intended to bypass safety guidelines, override behavior, or extract system prompts. The content is strictly focused on Skyrim modding grammar.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or network exfiltration patterns were found. The skill operates locally on game configuration data.
- [REMOTE_CODE_EXECUTION]: There are no attempts to download or execute code from remote servers. All references are for documentation purposes.
- [OBFUSCATION]: No obfuscated strings, Base64 encoding of commands, zero-width characters, or homoglyph attacks were detected in the text or scripts.
- [COMMAND_EXECUTION]: The validation script
scripts/validate_kid.pyperforms static analysis using string manipulation and regular expressions. It does not execute shell commands or use any dangerous subprocess calls. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and audit
_KID.inifiles. The ingestion is handled by a static script that validates content against a strict schema of known record signatures, preventing the execution of arbitrary instructions embedded in the data. - [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any load-time command execution syntax in its instructions.
Audit Metadata