Is akf-trust-metadata safe to install?

SaferSkills independently audited akf-trust-metadata (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/akf-trust-metadata/SKILL.md · 1 file

skills/akf-trust-metadata/SKILL.md2.0 KB · Markdown

name: akf-trust-metadata

description: The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA aud

category: AI & Agents

source: antigravity

tags: [pdf, docx, ai, agent, workflow, image]

url: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/akf-trust-metadata

AKF — The AI Native File Format

Every photo has EXIF. Every song has ID3. AKF is the native metadata format for AI-generated content.

When to Use

Use this skill when you need to stamp, inspect, or audit provenance and trust metadata on AI-generated or AI-modified files for compliance, review, or handoff workflows.

After creating or modifying files

akf stamp <file> --agent <agent-name> --evidence "<what you did>"

Evidence examples:

"generated from user prompt"
"refactored existing code"
"tests pass"
"docs reviewed"

Before modifying existing files

akf read <file>          # Check existing trust metadata
akf inspect <file>       # See detailed trust scores

Compliance auditing

akf audit <file> --regulation eu_ai_act    # EU AI Act Article 50
akf audit <file> --regulation hipaa         # HIPAA
akf audit <file> --regulation sox           # SOX
akf audit <file> --regulation nist_ai       # NIST AI RMF

Classification

--label confidential for finance/secret/internal paths
--label public for README, docs, examples
Default: internal

Install

pip install akf

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

akf-trust-metadata— agent skill

Is akf-trust-metadata safe to install?

AKF — The AI Native File Format

When to Use

After creating or modifying files

Before modifying existing files

Compliance auditing

Classification

Install

Links

Limitations

Audit the pieces. Scan the whole. Decide.