atai-operational-state-monitoring-agent
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill interacts with the Archetype AI Agents API to process sensor data. It utilizes environment variables for managing API keys and endpoints, which is a standard security best practice for credential management.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The provided reference script,
run_osm_agent.py, is implemented using only the Python standard library. This design choice minimizes supply chain risks by avoiding external package dependencies. - [COMMAND_EXECUTION]: The script performs file system operations (reading input CSVs and writing result CSVs) that are strictly scoped to the user's explicit command-line arguments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted sensor data from CSV files for classification. While it lacks explicit boundary markers for the data content, the interaction is limited to a structured machine learning pipeline (classifier) rather than an LLM prompt interpolation, significantly reducing the risk of injection-based attacks.
- [SAFE]: The network communication is directed to a user-defined endpoint, with documentation correctly pointing to official vendor infrastructure (
*.archetypeai.app). No obfuscation, persistence mechanisms, or privilege escalation patterns were detected.
Audit Metadata