interview-system-designer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of standalone Python utilities (
loop_designer.py,hiring_calibrator.py, etc.) and informational markdown reference files. Technical analysis shows that the scripts are limited to data processing and local text/JSON output. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves ingesting and analyzing structured external data (JSON interview results and role definitions).
- Ingestion points: Files are ingested through the
--inputargument in the three main Python scripts (loop_designer.py,question_bank_generator.py, andhiring_calibrator.py). - Boundary markers: Although explicit boundary markers for the agent are not defined in the markdown, the Python scripts act as a processing layer that validates and standardizes data before it would be presented to the agent.
- Capability inventory: A review of all
.pyfiles confirms the absence of high-risk capabilities such aseval(),exec(),subprocess, or file writing to sensitive directories. All scripts use standard library modules likestatistics,json, andmathfor their calculations. - Sanitization: The
hiring_calibrator.pytool implements a_validate_interview_recordmethod that strictly checks for the presence of required keys and validates that all scores are numeric and within the expected 1-4 range, effectively sanitizing the input data against common schema confusion or injection attempts.
Audit Metadata