xyo-knowledge
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a documentation-only resource providing domain knowledge for the XYO Protocol. It does not contain executable code, scripts, or malicious instructions.
- [INDIRECT_PROMPT_INJECTION]: Analysis of the data ingestion surface for processing external payloads and bound witnesses. The skill documents mandatory use of Zod-based validation factories (e.g.,
asMovePayload,BoundWitnessValidator) to define trust boundaries. It provides a defensive evidence chain by instructing agents to validate schema, version, shape, and signatures on every read from archivists or remote stores. - [EXTERNAL_DOWNLOADS]: Mentions of the
@xyo-network/*ecosystem and theariestools/ariestools-skillsrepository are neutral and part of the intended development toolchain for building on the XYO protocol.
Audit Metadata