internal-comms

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a robust set of tools for business operations. No malicious patterns, such as prompt injection, data exfiltration, or unauthorized code execution, were detected.
  • [DATA_EXPOSURE]: No evidence of hardcoded credentials, sensitive file access (e.g., .ssh, .aws), or network operations was found. The skill operates entirely on locally provided JSON input.
  • [REMOTE_CODE_EXECUTION]: The Python scripts (change_announcement_builder.py, comms_calendar_builder.py, comms_template_filler.py) use only the Python standard library. No external package installations or remote script executions (e.g., curl|bash) are present.
  • [OBFUSCATION]: No obfuscated strings, multi-layer encoding, or hidden characters were found in the skill's instructions or scripts.
  • [PROMPT_INJECTION]: The skill's instructions are task-oriented and do not attempt to override system safety guidelines or behavior. Reference materials are well-cited and context-appropriate.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 03:29 PM