occupancy-calculator
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external files, specifically PROJECT.md, occupancy.json, and program.json. The instructions lack explicit boundary markers or sanitization steps to prevent the AI from following malicious instructions potentially hidden in this data. 1. Ingestion points: Reads PROJECT.md, occupancy.json, and program.json from the working directory. 2. Boundary markers: None explicitly defined for file ingestion. 3. Capability inventory: Access to Write, WebSearch, and WebFetch tools across multiple scripts. 4. Sanitization: No explicit validation of file content beyond mapping to factors.
- [EXTERNAL_DOWNLOADS]: The skill uses WebSearch and WebFetch to verify occupancy factors against official repositories including codelibrary.amlegal.com, govt.westlaw.com, and up.codes.
- [COMMAND_EXECUTION]: The skill uses the Write tool to generate occupancy reports in Markdown and CSV formats and to maintain the occupancy.json state file in the local working directory.
Audit Metadata