balance-test
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's 'Self-Healing Validation' phase instructs the agent to execute build, compile, and test commands found within the project environment to verify that recommendations do not break the codebase.
- [DATA_EXFILTRATION]: The 'Self-Evolution Telemetry' section directs the agent to write metadata about its execution (outcomes, iterations, and bottlenecks) to a specific local file at
~/.claude/projects/skill-telemetry.md. While this data remains on the local machine, it involves writing to a path outside the immediate project directory. - [PROMPT_INJECTION]: The skill represents an indirect prompt injection surface because it ingests untrusted data from the repository during the 'Data Extraction' phase.
- Ingestion points: Reads numerical stats and code from all files in the repository (SKILL.md).
- Boundary markers: No explicit delimiters or 'ignore embedded instructions' warnings are used when processing extracted stats.
- Capability inventory: The skill can execute shell commands for builds and tests (SKILL.md).
- Sanitization: No sanitization of the extracted numerical data or code strings is performed before they are used in simulations.
Audit Metadata