why
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and configuration metadata. It does not include any scripts, binaries, or executable logic.
- [SAFE]: No security threats such as prompt injection, data exfiltration, or unauthorized command execution were detected. The instructions include explicit boundaries that prevent the agent from modifying the system or writing artifacts without explicit user consent.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting data from external sources such as pull requests, RFCs, and issue trackers as seen in
SKILL.md. While explicit boundary markers and sanitization logic are not provided in the text, the skill's capability inventory is limited to reconstruction and explanation, with no instructions for system modification or network operations.
Audit Metadata