duck-teach
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and referenced guardrails emphasize safety, user approval, and refusal of insecure recommendations. No indicators of prompt injection, data exfiltration, or malicious execution were found.
- [PROMPT_INJECTION]: The content contains defensive instructions that reinforce security boundaries rather than attempting to bypass them. It explicitly directs the agent to refuse changes that would weaken security controls.
- [DATA_EXPOSURE]: The skill does not access sensitive system paths or hardcoded secrets, and it contains no network communication capabilities.
- [REMOTE_CODE_EXECUTION]: No external dependencies are fetched, and there are no commands for remote script execution or dynamic code evaluation.
Audit Metadata