polish
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's Python runner (
scripts/run.py) performs network requests to the official vendor API athttps://ai-skills.ai. These requests are necessary to transmit diagnostic parameters and receive analysis results. - [COMMAND_EXECUTION]: The skill provides standard documentation for executing the local Python script to perform business analysis tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by ingesting external data for analysis.
- Ingestion points: Untrusted data enters the agent context via the
materialUrl,materialFile, andmaterialTextparameters defined inreferences/form-schema.json. - Boundary markers: There are no explicit instructions or delimiters used to separate user-provided content from agent instructions in the provided files.
- Capability inventory: The skill possesses the capability to perform network requests to the vendor's API.
- Sanitization: The provided Python script does not perform sanitization or validation of the input data before transmission to the API.
Audit Metadata