verify-workflow-spec-compliance
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or ignore instructions were detected.- [DATA_EXFILTRATION]: The skill reads from local documentation paths (e.g.,
docs/features/,docs/bugs/) and source code to perform its function. No network operations (curl, wget, fetch) or access to sensitive credentials (e.g.,.ssh,.env) are present.- [REMOTE_CODE_EXECUTION]: No remote script downloads, piped execution, or package installations were found.- [COMMAND_EXECUTION]: The skill does not invoke any shell commands, subprocesses, or system utilities.- [INDIRECT_PROMPT_INJECTION]: - Ingestion points: Processes potentially untrusted code from PRs and specification files.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The skill is limited to text analysis and local report writing; it lacks network access or dangerous execution tools.
- Sanitization: No specific sanitization logic is described for the ingested text content.
- [DYNAMIC_CONTEXT_INJECTION]: No usage of the dynamic exclamation-backtick command syntax (
!command) was found.
Audit Metadata