ai-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of legitimate technical documentation and developer utilities for building AI systems. No malicious behavior, unauthorized data access, or obfuscation was detected.\n- [DYNAMIC_EXECUTION]: The script scripts/optimize_tokens.py uses import('datetime') to fetch the current timestamp. This is a static, benign use of the standard library and does not involve untrusted input.\n- [INDIRECT_PROMPT_INJECTION]: As a toolkit for AI applications, the skill implements prompt management and RAG systems, which are potential surfaces for indirect prompt injection.\n
- Ingestion points: Text documents loaded into the vector database in scripts/setup_rag.py and variable interpolation in scripts/monitor_ai_service.py.\n
- Boundary markers: Best practices for structured prompting and constraints are documented in references/prompt_templates.md.\n
- Capability inventory: The system integrates with external AI APIs (OpenAI, Anthropic) for text generation.\n
- Sanitization: Uses safe YAML loading (yaml.safe_load) and relies on the model providers' internal safety guardrails.
Audit Metadata