decompose-ishikawa
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists exclusively of instructional text and metadata. It does not include any scripts, shell commands, or executable code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a contract to ingest external data such as 'effect_statement' and 'cause_families' in SKILL.md. While this creates an ingestion surface for untrusted data, the skill does not define any capabilities (network access, file system access, or command execution) that could be exploited via injection.
- [SAFE]: All components of the skill are purely descriptive and do not present any identifiable security risks. The provenance reference 'deep-insight/ishikawa-decomposition' is informational and does not involve remote code execution.
Audit Metadata