vp-design-reasoning
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of informational markdown files and a YAML configuration. It contains no executable scripts (such as .py, .js, or .sh files) and performs no automated operations.
- [EXTERNAL_DOWNLOADS]: The documentation includes references to external design guidelines and other agent skills hosted on GitHub (e.g.,
github.com/VdustR/skills,github.com/pbakaus/impeccable,github.com/microsoft/vscode). These are static links provided for the agent to reference documentation or transition to other skills; they do not involve runtime script execution or the installation of unverified packages. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided requirements and research data. While this represents a data ingestion surface, the skill lacks exploitable capabilities such as file system writes, network requests, or shell command execution. It also includes explicit instructions to avoid accessing sensitive data and to defer actions requiring authority to the user.
- [COMMAND_EXECUTION]: There are no shell commands, subprocess calls, or dynamic execution patterns (
eval,exec,!command) present in the skill files.
Audit Metadata