soia-dev-coding-protocol
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides installation commands using
npxandclaude pluginthat target thesoia-teamvendor ecosystem (e.g.,soia-team/soia-open-dev-skills,soia-dev@soia). These represent standard deployment mechanisms for the skill author's resources. - [SAFE]: The protocol explicitly instructs against the storage or exfiltration of sensitive information, such as API keys, credentials, or customer data, directing the agent to minimize references to such data and avoid including them in logs or code patches.
- [SAFE]: The skill includes defensive programming requirements for the agent, such as avoiding the concatenation of untrusted input into shell commands and ensuring proper handling of resource lifetimes and error states.
- [SAFE]: The skill requires explicit authorization for sensitive operations including git push, deployment, and data deletion, establishing a manual checkpoint for high-risk actions.
Audit Metadata