qms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains comprehensive documentation for medical device quality management system auditing, following ISO 13485:2016 standards. The references and instructions are professional, context-appropriate, and contain no malicious code or instructions.
- [COMMAND_EXECUTION]: The skill includes a Python script (scripts/audit_schedule_optimizer.py) designed to calculate audit priorities. Analysis of the source code confirms it uses only standard Python libraries (argparse, json, datetime) to perform deterministic scheduling logic. The script does not access sensitive files, initiate network connections, or use unsafe functions like eval() or exec().
- [INDIRECT_PROMPT_INJECTION]: The audit schedule optimizer script ingests external data from a processes.json file. This represents a data ingestion surface where external content enters the agent's context. However, the script treats this input strictly as data for scheduling calculations and does not execute it, and the resulting output is structured, posing a low risk to the agent.
Audit Metadata