raffle-winner-picker
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and does not include any executable scripts, binary files, or external network requests beyond what is necessary for its stated purpose of reading user-provided data.
- [DATA_EXPOSURE_ANALYSIS]: While the skill involves reading data from Google Sheets or local files, it relies on the agent's existing tool capabilities and does not introduce new exfiltration vectors or hardcoded credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection because it processes untrusted data from external spreadsheets. However, this is inherent to the functionality of a raffle picker and no malicious patterns were found in the skill's instructions themselves.
Audit Metadata