Skills
skills/skills/secure-code-game/standup/Gen Agent Trust Hub

standup

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill retrieves data from memory and interpolates it directly into the output template without sanitization or boundary markers.
  • Ingestion points: untrusted data enters the context via ctx.readMemory() in handler.js.
  • Boundary markers: there are no delimiters or instructions to ignore embedded commands in the interpolated data.
  • Capability inventory: the skill has access to read_file and write_file tools as specified in SKILL.md.
  • Sanitization: no validation or escaping is performed on the data retrieved from memory.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 03:56 PM
Security Audit — agent-trust-hub — standup