project-rules-architect

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a generator for agent instructions and does not contain any malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms.
  • [SAFE]: It includes dedicated security templates (e.g., references/templates/core/security.md) that enforce industry-standard security practices, such as preventing the logging of sensitive tokens and requiring secure storage for credentials.
  • [SAFE]: The provided scripts (scripts/rules-selftest.js and scripts/selftest.js) are utility tools designed to verify the consistency and correctness of the generated rule sets. They operate locally on the project files and do not perform any unauthorized network or system operations.
  • [SAFE]: External tool references (such as gitleaks, osv-scanner, trivy, and jscpd) and service URLs (such as start.spring.io) are for well-known, legitimate developer tools and services.
  • [SAFE]: No obfuscation techniques, hidden commands, or dynamic execution of untrusted code were detected across the 51 files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 08:58 AM