levelup-boot

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs local file read and write operations within a project-specific directory structure (.adlc). It follows a "least privilege" approach by reading only matched context modules and explicitly forbidding directory traversal. No network operations or external dependencies are involved.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from local configuration files (.adlc/init-options.json) and documentation modules (rules, personas, examples). While this constitutes an attack surface, the risk is negligible as the data source is the user's own project environment, and the output is structured into summary tables with specific constraints on fabrication.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:32 PM