kickoff-setup
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary purpose is configuration management for the kickoff tool, involving reading and writing model mappings to a local
kickoff.yamlfile.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from existingkickoff.yamlfiles (Step 3), which serves as an ingestion point for potentially untrusted data. While it lacks explicit boundary markers, it includes a validation step (Step 5) that verifies all entries against the system's detected harness capabilities. Its capabilities are limited to writing configuration files and suggesting user-initiated skill creation (Step 7).
Audit Metadata