skills/whyashthakker/estack/explain/Gen Agent Trust Hub

explain

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill strictly defines instructional layers for explaining technical topics. It encourages the use of standard development tools like git log and git blame for context but does not include any commands for data exfiltration, persistence, or privilege escalation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and explain external content such as code and diffs. While this introduces an inherent attack surface for indirect prompt injection from the files being analyzed, the skill itself does not provide any unsafe execution paths or mechanisms that would enable an attacker to bypass agent safety filters or exfiltrate data. The use of standard agent tools to 'read the code or run it' is a legitimate developer workflow capability.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 11:17 AM