clinic-sample-size
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input that is reflected in generated artifacts and contains self-referential metadata. \n- Ingestion points: User-provided CLI arguments such as
--study_name,--outcome, and--inputinscripts/main.pyare incorporated into the research reports. \n- Boundary markers: No explicit delimiters or instructions are used to isolate user-supplied strings within the Markdown generation logic. \n- Capability inventory: The skill performs file system writes to save reports using theopen()function inscripts/main.py. \n- Sanitization: Input strings are concatenated into the Markdown report without escaping, which could lead to formatting issues or indirect injection if the report is parsed by other agents. \n- Self-referential content: The inclusion ofclinic-sample-size_audit_result_v2.jsonprovides a pre-computed security verdict, which targets the analysis process. \n- [DYNAMIC_EXECUTION]: The skill dynamically constructs and writes documents at runtime. \n- Evidence:scripts/main.pygenerates Markdown report content by combining static templates with dynamic user parameters and saves the output to the disk.
Audit Metadata