skills/tonone-ai/tonone/spine-service/Gen Agent Trust Hub

spine-service

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The instructions explicitly include security best practices, such as ensuring .env files are not committed to version control and ensuring error-handling middleware does not leak stack traces or internal details to users.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool for environment detection (e.g., ls -a) and project setup, which is necessary and appropriate for its primary purpose of scaffolding new software projects.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads existing project structures and configurations to determine language preferences. While this is a data ingestion surface, the operations performed (scaffolding a new service) are low-risk in this context, and the instructions focus on generating new code rather than executing existing files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 02:47 PM
Security Audit — agent-trust-hub — spine-service