org-health-diagnostic
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a set of organizational benchmarks in markdown format and a Python script for scoring these metrics. A comprehensive analysis of all 11 threat categories revealed no malicious patterns or security risks.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The included script
scripts/health_scorer.pyuses only standard Python libraries (json,sys,dataclasses,typing,enum) and performs simple arithmetic calculations. - [DATA_EXFILTRATION]: There are no network operations or instructions to access sensitive local files. The script only interacts with the user via standard input and output.
- [COMMAND_EXECUTION]: The skill does not execute any shell commands or subprocesses. It is a pure logic and calculation tool.
- [INDIRECT_PROMPT_INJECTION]: While the tool processes external data (business metrics), the risk is negligible as the Python script strictly validates inputs by attempting to convert them to floats, effectively sanitizing any potential injection attempts in the numeric fields.
Audit Metadata