decision-capture

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill consists entirely of natural language instructions and a markdown template for manual reporting. It does not include any scripts, executable code, or package dependencies.
  • [SAFE]: The instructions include explicit security constraints, such as 'Read-only. Do not edit files automatically,' which prevents the agent from making unauthorized changes to the filesystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external context (project decisions), which could theoretically contain malicious instructions. However, because the skill has no write capabilities, network access, or dynamic execution paths, the risk of exploitation is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 10:38 AM