onboard
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, focusing on UI/UX design principles for onboarding. It does not contain any functional code that executes on the host system beyond providing design guidance.
- [PROMPT_INJECTION]: No patterns associated with prompt injection, jailbreaking, or system instruction overrides were found. The use of 'CRITICAL' and 'MANDATORY' is confined to design methodology and context gathering protocols.
- [EXTERNAL_DOWNLOADS]: While the skill mentions several third-party libraries (e.g., Tippy.js, Intro.js), these are listed as suggestions for the user's implementation and are not downloaded or executed by the agent itself.
- [DATA_EXFILTRATION]: There are no network operations, credential harvesting, or sensitive file access patterns present in the file.
- [COMMAND_EXECUTION]: The skill does not contain any shell commands, subprocess calls, or privilege escalation attempts.
Audit Metadata