relationship-science-coach
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes internal utility scripts (
validate_skill.pyandsmoke_test.py) that usesubprocess.runto execute other bundled Python scripts for validation and testing. These operations are restricted to the skill's local directory and do not involve shell invocation of user-supplied strings, presenting no risk to the host environment. - [PROMPT_INJECTION]: Static detections regarding action concealment were analyzed and found to be benign. The instructions in
references/EDGE_CASES.mdandreferences/SAFETY_SEMANTIC_TRIAGE.mdadvise users in potentially abusive situations to use safe devices and keep safety plans private from monitors or abusers. This is standard safety protocol for domestic violence support and is not an attempt to hide AI behavior or bypass security controls. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input for coaching purposes. It implements a robust safety triage system described in
references/SAFETY_SEMANTIC_TRIAGE.mdwhich identifies dangerous contexts (e.g., violence, coercion) and triggers hard redirects to crisis resources. This layered defense minimizes the risk of the agent obeying malicious instructions embedded in user messages.
Audit Metadata