zeno-validating-work
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a structured verification process to ensure task completion. No direct malicious patterns, remote code downloads, or exfiltration attempts were detected.- [COMMAND_EXECUTION]: The skill instructs the agent to run localized verification commands (e.g.,
cargo test,deno task test,npm run lint). These commands are standard for project development and are scoped to component directories.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface because it requires the agent to ingest and analyze output from shell commands. 1. Ingestion points: Command output reading specified in the Gate Function workflow of SKILL.md. 2. Boundary markers: Absent from instructions. 3. Capability inventory: Execution of terminal tools in multiple component directories. 4. Sanitization: Not specified for tool output processing.
Audit Metadata