pythia-verify
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains no executable code, external dependency installations, or network requests to untrusted domains. All commands referenced (
pythia) are treated as pre-installed local utilities. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and report data from external command outputs, which creates a potential surface for indirect instructions to be processed by the agent.
- Ingestion points: The agent is instructed to read output from
pythia errors,pythia invalid,pythia lint, andpythia explain(SKILL.md). - Boundary markers: None are defined to separate tool output from agent instructions.
- Capability inventory: The skill allows for state-changing operations via
pythia journal restore(SKILL.md). - Sanitization: No validation or sanitization of the database output is specified before the agent processes it for the final report.
Audit Metadata