fda-qsr-audit-prep
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of local Python scripts to facilitate audit readiness. Evidence includes the execution of
qsr_compliance_checker.py,fda_submission_tracker.py,hipaa_risk_assessment.py, andaudit_simulator.py(SKILL.md). - [INDIRECT_PROMPT_INJECTION]: The skill ingests compliance data from external JSON files, establishing an attack surface for data-driven instructions.
- Ingestion points:
compliance_state.json,submissions.json,phi_inventory.json, andfda_qsr_scope.json(SKILL.md). - Boundary markers: None identified in the instructional content.
- Capability inventory: The skill utilizes subprocess calls to execute Python scripts (SKILL.md).
- Sanitization: There is no evidence of sanitization or validation logic for the ingested file contents.
Audit Metadata