qms-audit-expert
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides static documentation and checklists for quality management system audits. All scripts and instructions align with the stated purpose of assisting with ISO 13485 compliance.
- [INDIRECT_PROMPT_INJECTION]: The audit schedule optimizer script ingests external process data, creating a potential surface for indirect injection. 1. Ingestion points: The script
scripts/audit_schedule_optimizer.pyloads data from a user-providedprocesses.jsonfile. 2. Boundary markers: The script does not use specific markers to delimit ingested text from system instructions. 3. Capability inventory: The script's operations are limited to mathematical prioritization and date scheduling; it lacks network access, file write capabilities, or shell execution. 4. Sanitization: The script uses basic type checking for numerical inputs but does not sanitize text descriptions as they are not used in high-risk operations.
Audit Metadata