fda-qsr-audit-prep
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a specialized compliance tool designed for regulatory audit preparation. All scripts and references are transparent, well-documented, and align with the stated purpose of medical device quality management.
- [COMMAND_EXECUTION]: The skill executes two local Python scripts (
scripts/qsr_readiness_score.pyandscripts/dhf_completeness_checker.py) to process compliance data. Analysis of these scripts confirms they use only standard library modules and perform benign data parsing and reporting on local files provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for indirect prompt injection via the processing of untrusted YAML configuration files (e.g.,
qsr-controls.yaml). However, the scripts only perform structured data parsing and output generation; they do not interpret the content of these files as instructions or commands for the agent.
Audit Metadata