kid-authoring

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill instructions do not contain any patterns intended to bypass safety guidelines, override behavior, or extract system prompts. The content is strictly focused on Skyrim modding grammar.
  • [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or network exfiltration patterns were found. The skill operates locally on game configuration data.
  • [REMOTE_CODE_EXECUTION]: There are no attempts to download or execute code from remote servers. All references are for documentation purposes.
  • [OBFUSCATION]: No obfuscated strings, Base64 encoding of commands, zero-width characters, or homoglyph attacks were detected in the text or scripts.
  • [COMMAND_EXECUTION]: The validation script scripts/validate_kid.py performs static analysis using string manipulation and regular expressions. It does not execute shell commands or use any dangerous subprocess calls.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and audit _KID.ini files. The ingestion is handled by a static script that validates content against a strict schema of known record signatures, preventing the execution of arbitrary instructions embedded in the data.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any load-time command execution syntax in its instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:44 AM