design-and-build
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to bypass safety filters or override system instructions were detected. The use of "CRITICAL" and "IMPORTANT" is limited to instructional emphasis regarding project governance and maturity level enforcement.
- [EXTERNAL_DOWNLOADS]: The skill references various standard development tools (e.g., Black, Prettier, Radon, Bandit) and GitHub Actions. These are documented neutrally as part of software engineering workflows and do not point to untrusted or malicious sources.
- [COMMAND_EXECUTION]: Example commands for linting, testing, and CI/CD setup are provided as templates for the agent to recommend to users. There are no patterns suggesting the skill would execute arbitrary or malicious commands in the background.
- [DATA_EXFILTRATION]: No patterns for accessing sensitive files or exfiltrating data to remote servers were identified. The skill explicitly includes security checklists that advocate for the prevention of hardcoded secrets.
- [OBFUSCATION]: A thorough scan of the skill files revealed no Base64 encoded strings, zero-width characters, homoglyphs, or other techniques used to hide malicious intent or URLs.
Audit Metadata