fhir-hl7-validator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of Markdown documentation and JSON metadata. No executable scripts, binaries, or active code components are provided within the skill package.
- [INDIRECT_PROMPT_INJECTION]: The skill specifies a workflow for processing external healthcare data formats, which establishes a potential ingestion surface for indirect prompt injection. * Ingestion points: Commands such as validate-fhir, validate-hl7, and bulk-validate in SKILL.md are designed to ingest external healthcare files. * Boundary markers: The skill does not instruct the agent to use specific boundary delimiters or ignore embedded instructions when reading file content. * Capability inventory: The skill describes validation and parsing logic but does not ship with scripts that have file-writing, network communication, or shell execution capabilities. * Sanitization: No explicit content filtering or sanitization measures are defined to prevent the agent from following instructions embedded in the data files.
Audit Metadata