spine-service
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The instructions explicitly include security best practices, such as ensuring
.envfiles are not committed to version control and ensuring error-handling middleware does not leak stack traces or internal details to users. - [COMMAND_EXECUTION]: The skill uses the
Bashtool for environment detection (e.g.,ls -a) and project setup, which is necessary and appropriate for its primary purpose of scaffolding new software projects. - [INDIRECT_PROMPT_INJECTION]: The skill reads existing project structures and configurations to determine language preferences. While this is a data ingestion surface, the operations performed (scaffolding a new service) are low-risk in this context, and the instructions focus on generating new code rather than executing existing files.
Audit Metadata