commitment-check
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown-based instructions and templates. It does not include any scripts (Python, JavaScript, shell), binaries, or configuration files that execute code.
- [SAFE]: Comprehensive review of the provided instructions found no evidence of malicious intent, prompt injection, or credential harvesting. The skill is designed for organizational task management.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process documents (via
@filesyntax), it lacks high-risk capabilities such as arbitrary command execution or network access, mitigating the risk of exploitation through external data. - Ingestion points: Processes initiative documents and files referenced via @file syntax.
- Boundary markers: No explicit delimiter instructions are provided for external content.
- Capability inventory: The skill is limited to text generation and saving the output report to the user's workspace.
- Sanitization: No specific sanitization or validation of the input document content is defined beyond human review gotchas.
Audit Metadata