server-provisioner
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's documentation includes validation steps in
SKILL.mdthat utilize shell commands to run local Python scripts for linting and verification purposes. Specifically, it references scripts located at$CODEX_HOME/skills/.system/skill-creator/scripts/quick_validate.pyand$CODEX_HOME/skills/senior-skill-architect/scripts/lint_production_skill.pyto check the skill's integrity. - [PROMPT_INJECTION]: The skill incorporates specific safety instructions to prevent the agent from printing sensitive information such as SSH keys, tokens, or passwords, and to restrict production environment mutations without explicit approval, which helps mitigate instructions aimed at bypassing these controls.
- [DATA_EXFILTRATION]: Safety guidelines specifically prohibit the disclosure of sensitive files and credentials, such as SSH keys, tokens, and
.envfiles, reducing the risk of accidental data exposure.
Audit Metadata