internal-comms
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a robust set of tools for business operations. No malicious patterns, such as prompt injection, data exfiltration, or unauthorized code execution, were detected.
- [DATA_EXPOSURE]: No evidence of hardcoded credentials, sensitive file access (e.g., .ssh, .aws), or network operations was found. The skill operates entirely on locally provided JSON input.
- [REMOTE_CODE_EXECUTION]: The Python scripts (
change_announcement_builder.py,comms_calendar_builder.py,comms_template_filler.py) use only the Python standard library. No external package installations or remote script executions (e.g., curl|bash) are present. - [OBFUSCATION]: No obfuscated strings, multi-layer encoding, or hidden characters were found in the skill's instructions or scripts.
- [PROMPT_INJECTION]: The skill's instructions are task-oriented and do not attempt to override system safety guidelines or behavior. Reference materials are well-cited and context-appropriate.
Audit Metadata