uv-and-mesh-attributes
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No evidence of instructions attempting to override agent behavior, bypass safety guidelines, or extract system prompts was found.
- [DATA_EXFILTRATION]: The skill does not access sensitive local files (such as credentials or SSH keys) or perform unauthorized network operations. References to external URLs are limited to official documentation and the author's own public GitHub repository for code examples.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download and execution of remote scripts or the installation of unverified third-party packages.
- [OBFUSCATION]: The content is provided in plain text with no hidden characters, Base64 encoding of commands, or homoglyph-based attacks detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes methods for processing mesh data which could theoretically be untrusted, it lacks any high-privilege capabilities (like arbitrary command execution or network exfiltration) that would make such data exploitable as an injection vector.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not use any dynamic execution patterns (such as shell command substitution in metadata) that could trigger actions at load time.
Audit Metadata