ai-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions and reference materials are focused on engineering best practices and contain no patterns associated with overriding agent behavior or bypassing safety filters.
- [DATA_EXFILTRATION]: There are no network operations, hardcoded credentials, or attempts to access sensitive system files like SSH keys or environment variables.
- [REMOTE_CODE_EXECUTION]: The skill contains no commands to download or execute external scripts, and the frontmatter explicitly states there are no runtime dependencies.
- [OBFUSCATION]: No hidden content, multi-layer encoding, homoglyphs, or zero-width characters were identified in any of the analyzed files.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic command execution syntax in the markdown body.
- [INDIRECT_PROMPT_INJECTION]: While the skill defines workflows for processing external data (retrieval and tool use), it includes security-conscious guidance such as scope permissions, mandatory validation, and human approval boundaries to mitigate these risks.
Audit Metadata