search-procedures
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external configuration and data files (
CARD,DATA) to perform statistical simulations. These represent ingestion points for untrusted data that could theoretically contain malicious instructions. - Ingestion points: Input files passed to the
phack_cli.pyscript (e.g.,DATA,CARD). - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The agent is instructed to execute local CLI tools (
python scripts/phack_cli.py) and use a Python library (phack). - Sanitization: Not described in the skill body; the agent relies on the logic within
phack_cli.pyand thephackmodule.
Audit Metadata