healthcare-payer-audit
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local script at
/sandbox/.openclaw/workspace/scripts/care_backlog_analyzer.pyto analyze backlog data. - [PROMPT_INJECTION]: The skill processes untrusted data from local JSON files, creating a surface for indirect prompt injection. Ingestion points:
/sandbox/.openclaw/workspace/data/payer_rules.jsonandescalation_rules.json. Boundary markers: None identified. Capability inventory: Execution of a local Python script via subprocess. Sanitization: No validation or sanitization of the JSON content is documented.
Audit Metadata