project-rules-architect
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a generator for agent instructions and does not contain any malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms.
- [SAFE]: It includes dedicated security templates (e.g.,
references/templates/core/security.md) that enforce industry-standard security practices, such as preventing the logging of sensitive tokens and requiring secure storage for credentials. - [SAFE]: The provided scripts (
scripts/rules-selftest.jsandscripts/selftest.js) are utility tools designed to verify the consistency and correctness of the generated rule sets. They operate locally on the project files and do not perform any unauthorized network or system operations. - [SAFE]: External tool references (such as
gitleaks,osv-scanner,trivy, andjscpd) and service URLs (such asstart.spring.io) are for well-known, legitimate developer tools and services. - [SAFE]: No obfuscation techniques, hidden commands, or dynamic execution of untrusted code were detected across the 51 files.
Audit Metadata