rfp-responder
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strictly local logic using the Python standard library (argparse, json, re, pathlib). No external dependencies or package installations are required or performed.
- [SAFE]: No network capabilities or exfiltration patterns were detected. The scripts process input files provided by the user and output results to the terminal or local files.
- [SAFE]: The skill includes comprehensive documentation and reference files (Shipley method, RFP strategy canon) that align with the stated purpose of professional bid management.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted RFP documents via the
rfp_parser.pyscript. However, the risk is negligible as the processing is performed using regex-based keyword extraction rather than prompt interpolation, and the output is intended for structured human review rather than autonomous execution.
Audit Metadata