house-rules
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to read workflow and coding conventions from an external markdown file at
https://raw.githubusercontent.com/Studio-Moser/skills-n-stuff/main/plugins/harness/references/house-rules.md. This resource belongs to the skill's vendor and is used for canonical documentation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests instructions from a remote source, creating a potential attack surface. However, the ingestion point is limited to a document on the vendor's own infrastructure, intended to provide standard operating procedures for the agent.
- Ingestion points: SKILL.md directs the agent to read from a remote GitHub URL.
- Boundary markers: The instructions specify that local
CLAUDE.mdorAGENTS.mdfiles override these universal rules, providing clear context hierarchy. - Capability inventory: The skill itself does not invoke subprocesses, file-write operations, or other dangerous capabilities.
- Sanitization: The content is treated as markdown documentation for the agent to follow.
Audit Metadata