✓
Third-party audit

Gen Agent Trust Hub

deal-review · anthropics/knowledge-work-plugins

Passed
Provider summary

This skill is designed with robust security practices, particularly regarding the handling of untrusted external data. It includes explicit instructions to treat content from emails, chats, and transcripts as data rather than instructions, mitigating potential prompt injection risks. The skill also enforces human-in-the-loop verification for any actions derived from untrusted content and prevents the rendering of potentially malicious links found in external documents.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
pass
Risk level
NONE
Audited
Oct 22, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.