mdr-745-specialist
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions provide examples for executing a local Python script
scripts/mdr_gap_analyzer.pyto assess medical device compliance status. - [NO_CODE]: Several referenced components, including the
scripts/mdr_gap_analyzer.pyfile and the entirereferences/directory containing markdown guides, are missing from the provided skill package. - [PROMPT_INJECTION]: The skill ingests untrusted user input (device names and classifications) into a command-line utility, creating a surface for indirect prompt injection. * Ingestion points: User-supplied strings for
--deviceand--classarguments inmdr_gap_analyzer.py. * Boundary markers: No delimiters or "ignore instructions" warnings are present in the provided tool usage examples. * Capability inventory: Executes local Python code with command-line arguments. * Sanitization: Verification of input sanitization is impossible as the core script source code was not included.
Audit Metadata