alterlab-redcap-cdisc
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [DATA_INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied CSV files, which presents a surface for indirect prompt injection if the agent interprets text content within the data dictionary as instructions.
- Ingestion points:
scripts/lint_data_dictionary.py(reads CSV data provided by the user). - Boundary markers: Absent; the skill does not explicitly use delimiters or instruction-ignore warnings when reading data files.
- Capability inventory: The skill utilizes
Read,Write,Bash,WebSearch, andWebFetchtools. - Sanitization: The linter validates column structure and data types but does not sanitize or escape natural language content in fields like 'Field Label' or 'Field Note'.
- [EXTERNAL_DOWNLOADS]: The skill references external documentation from CDISC and NCI-EVS (National Cancer Institute).
- Evidence: Links to
cdisc.orgfor standards documentation are included inreferences/cdisc_mapping.md. - Analysis: These resources are from well-known professional organizations and are used solely for informational reference, posing no security risk.
Audit Metadata