alterlab-treatment-plans

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The file assets/STYLING_QUICK_REFERENCE.md provides troubleshooting instructions that recommend using sudo tlmgr install to manage LaTeX packages. This is a standard administrative procedure for TeX Live environments and is documented here for user reference.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of user-provided .tex files through static analysis scripts.
  • Ingestion points: The scripts scripts/check_completeness.py and scripts/validate_treatment_plan.py read content from local files using the read_file function.
  • Boundary markers: None identified for shielding the AI agent, as the scripts primarily perform regex-based static validation.
  • Capability inventory: The skill uses Bash to invoke pdflatex or xelatex and performs file read/write operations.
  • Sanitization: No specific sanitization for ingested file content was identified; however, the skill explicitly mandates HIPAA de-identification and patient privacy throughout its documentation.
  • [COMMAND_EXECUTION]: The skill's core workflow involves executing local shell commands such as pdflatex and python to generate and validate medical documents, which is consistent with its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:36 PM