Gen Agent Trust Hub

boring-mode · hachej/boring-stack

Passed

Provider summary

The skill establishes a highly structured software development workflow using playbooks to guide tasks such as bug fixing, feature development, and refactoring. While following best practices for development, the skill is susceptible to indirect prompt injection because it relies on processing external task descriptions and feature contracts which may contain untrusted content. Additionally, it executes local repository scripts to verify and check work progress.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Interpretation

Compare the repository, publisher, and installation command before continuing.

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

Use the narrowest possible scope and avoid broad credentials for third-party skills.