verify-quality-security

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a purely instructional resource designed to enforce security best practices within an AI agent's workflow. It does not contain any executable malicious code, obfuscation, or exfiltration patterns.
  • [CREDENTIALS_UNSAFE]: The skill actively promotes secure secret management by instructing the use of environment variables and .gitignore for sensitive files like .env and .pem. It includes a diagnostic command to check Git history for leaked secrets.
  • [COMMAND_EXECUTION]: The skill suggests using standard tools like npm audit and git log for defensive security auditing. These operations are diagnostic and standard for secure development.
  • [PROMPT_INJECTION]: No patterns to bypass safety filters were found. The skill reinforces a security-first mindset that mandates strict constraints on every line of code.
  • [DATA_EXFILTRATION]: No exfiltration patterns were detected. Guidelines focus on sanitizing inputs and ensuring sensitive system information is not leaked in error messages.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 01:47 AM
Security Audit — agent-trust-hub — verify-quality-security