xy-casefile
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is local file management within a dedicated directory (~/.xy/). This behavior is consistent with its stated purpose of creating a persistent knowledge base for decision tracking.
- [SAFE]: No unauthorized network operations, exfiltration patterns, or hardcoded credentials were detected. The skill includes a 'privacy mode' that uses aliases for sensitive entities, which is a positive security feature.
- [SAFE]: There is no evidence of obfuscation (Base64, zero-width characters, or homoglyphs) within the instructions or scripts.
- [SAFE]: The skill does not attempt to execute remote code or install unverified dependencies. It relies on local file read/write operations.
- [SAFE]: No prompt injection or behavior override patterns were identified. The instructions guide the AI to maintain a clear distinction between user input and AI-generated conclusions using specific labels.
Audit Metadata