✓
Third-party audit

Gen Agent Trust Hub

partnerships-kickoff · mbfinotti/partnerships-skills

Passed
Provider summary

The skill acts as a router and state manager for a collection of partnership-focused tools. It maintains project continuity by reading local files and updating a context artifact, while providing specific guidelines to protect sensitive data like PII from persistent memory. A potential indirect prompt injection surface exists because the skill summarizes information from various project files, but the skill includes sufficient safety procedures to be considered safe.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
pass
Risk level
NONE
Audited
Sep 13, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.