contract-performance

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [NO_CODE]: The skill is comprised solely of markdown instructions and YAML metadata. It does not include any scripts, binaries, or other executable components.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (procurement files, contracts, and evidence), creating a potential surface for indirect prompt injection. Ingestion points: External procurement and contract documents provided by the user as per the argument-hint. Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded within the analyzed documents. Capability inventory: The skill has no code execution, network access, or file-writing capabilities. Sanitization: There is no evidence of sanitization or filtering for external content before processing.\n- [SAFE]: The instructions are professional, focused on legal compliance, and consistent with the stated purpose. No malicious patterns such as prompt injection, obfuscation, or unauthorized data access were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 10:22 AM