alterlab-treatment-plans
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The file
assets/STYLING_QUICK_REFERENCE.mdprovides troubleshooting instructions that recommend usingsudo tlmgr installto manage LaTeX packages. This is a standard administrative procedure for TeX Live environments and is documented here for user reference. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis of user-provided
.texfiles through static analysis scripts. - Ingestion points: The scripts
scripts/check_completeness.pyandscripts/validate_treatment_plan.pyread content from local files using theread_filefunction. - Boundary markers: None identified for shielding the AI agent, as the scripts primarily perform regex-based static validation.
- Capability inventory: The skill uses
Bashto invokepdflatexorxelatexand performs file read/write operations. - Sanitization: No specific sanitization for ingested file content was identified; however, the skill explicitly mandates HIPAA de-identification and patient privacy throughout its documentation.
- [COMMAND_EXECUTION]: The skill's core workflow involves executing local shell commands such as
pdflatexandpythonto generate and validate medical documents, which is consistent with its stated purpose.
Audit Metadata