terms-of-service
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, command executions, or network requests were identified. The skill is entirely declarative and instructional.
- [NO_CODE]: The skill consists solely of markdown instructions, templates, and examples. It does not include any scripts (Python, JavaScript, shell) or configuration files that could trigger execution.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths (e.g., .ssh, .aws) are present in the documentation or examples.
- [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts (e.g., curl | bash) or package installations.
- [INDIRECT_PROMPT_INJECTION]: While the skill defines a surface for processing untrusted data (gathering product context in Step 1), the risk is negligible as the skill's capabilities are limited to text generation.
- Ingestion points: SKILL.md (Step 1 instructions for gathering user/product context).
- Boundary markers: Not explicitly defined in the drafting instructions.
- Capability inventory: None; the skill does not use tools, perform network operations, or access the file system.
- Sanitization: None; the skill relies on the LLM's internal safety filters for text generation.
Audit Metadata