contrarian-setup-gate
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a pure synthesis engine with no network access, no API keys, and no persistent state. It follows a 'fail-closed' design philosophy where any malformed, stale, or inconsistent input results in a rejected or insufficient evidence state rather than a failure.
- [EXTERNAL_DOWNLOADS]: No network operations or external downloads were found in the code or instructions.
- [COMMAND_EXECUTION]: No usage of subprocesses, shell commands, or arbitrary execution functions was detected.
- [DATA_EXFILTRATION]: No network-capable libraries are imported. The skill does not access sensitive local directories (~/.ssh, ~/.aws) or environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted JSON data from local files. However, it treats this data strictly as structured input for a state machine. It implements robust type-checking, value allowlisting, and specific hardening against JSON-based attacks (such as iterative non-finite number scanning and handling of recursion depth limits).
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or instructions to store secrets were found.
Audit Metadata